2 ms·
Well to be fair, you could open it up for everyone to use if there were an independent CA. Add some basic security checks before you're key can be trusted and t
by jeza 15y ago
Well to be fair, you could open it up for everyone to use if there were an independent CA. Add some basic security checks before you're key can be trusted and the ability to revoke keys and it should prevent malware. The later might be harder to implement as it would need to be updated.
- keeperofdakeys 15y agoThe problem is, as an individual who wants to compile his own kernel, how would I pass security checks? Any malware author could do the same. Also, a CA doesn't really work because once Secure Boot systems are distributed, you can't revoke a CA or keys.