2 ms·

So in both cases the government could install whatever they want. In both cases an uninformed user would be none the wiser. In both cases a very informed user

So in both cases the government could install whatever they want. In both cases an uninformed user would be none the wiser. In both cases a very informed user would know that government hijacking was a possibility. The only difference seems to be that some users would know that they were using secure boot, but not realise that the government could bypass it. I'm not sure that's a massive win for the government.

guard-of-terra 15y ago
Look at it the other way: China has a big IT ambition and it surely doesn't want to get locked out of its own PCs, so it would try to push their CA into BIOSes just to be a first class citizen if they'll try to build their own OS. But the fact that they have their CA in the BIOS would be unsettling for some.