3 ms·
Nitpick: Secure boot is about the firmware protecting the machine at boot time against unauthorized OSes or OS-modifications, establishing trust in the boot-med
by josteink 8y ago
Nitpick: Secure boot is about the firmware protecting the machine at boot time against unauthorized OSes or OS-modifications, establishing trust in the boot-media.
App-signing is about protecting the user within an already booted OS, trusted or not.
These are very different concepts.
- morpheuskafka 8y agoYeah, I agree. Just comparing them in that they both restricted users' perceived control and autonomy.
- josteink 8y agoSecure boot is 100% under the users control. You can load your own keys. Similarly in Windows you can control which CAs (or individual cettificates) you trust. They 100% respect the users freedom. Very much unlike Apple does with gatekeeper.