3 ms·
> We have to trust the bootloader to verify the digital signature on the kernel Do we? I was under the impression that most people would not care if the bootlo
by dependenttypes 7y ago
> We have to trust the bootloader to verify the digital signature on the kernel
Do we? I was under the impression that most people would not care if the bootloader did that or not.
- cryptonector 7y agoIf you want secure boot then you want the BIOS/UEFI to verify a signature on a boot loader which then has to verify the signature on a kernel which then has to verify filesystems' ubberblock checksums (which should be signed in the boot manifest, which signature should be verified too).
- dependenttypes 7y agoMost people to my knowledge do not use secure boot out of choice but rather because it was forced on them.