Alan Cox writes:
> certification key. That's the hood, welded shut, that's
absolutely
mandatory
> for a secured bootloader to have any logical purpose, whatsoever.
Correct - and you need to lock it down way more than that. Also I can't
see Red Hat directly signing third party binary blobs. If it does that it
implicitly believes they are lawful and also acquires some liability for
them in they malfuction.
AFAIK, Microsoft is already doing something like that with Windows drivers.
They must be signed by Microsoft, in order to avoid a warning thrown in your
face upon installation. I think that current Windows OS will just refuse to
install an unsigned driver, for any hardware.