> Why can't there be an external body that signs these, including those for Microsoft? There can be, and I strongly suspect Microsoft would prefer there to be

> Why can't there be an external body that signs these, including those for Microsoft? There can be, and I strongly suspect Microsoft would prefer there to be - reviewing and signing all the UEFI drivers consumes significant resources. Nobody else with sufficient resources to do this job has stepped forward.