2 ms·
If users knew what a CA was and how to determine whether or not a CA was trustworthy, there wouldn't be a need for "secure" boot.
by nodata 15y ago
If users knew what a CA was and how to determine whether or not a CA was trustworthy, there wouldn't be a need for "secure" boot.
- jiggy2011 15y agoThe user wouldn't need to know what a CA was unless they were planning on installing an additional/different OS. The default option would only allow the one that was installed by default. So unless they went poking around in bios they wouldn't even be aware of it unless some malware hijacked their bootloader in which case they would get a warning at bootup and have their last known good bootloader restored automatically. Since all the sub-CAs would be verified either by the OEM or by a global authority of somekind users could assume that all the options they were presented with were trustworthy.