3 ms·
> the firmware defaults to not trusting bootloaders or drivers signed with the Microsoft 3rd Party UEFI CA key So they don't trust software signed by Microsoft
by alpaca128 4y ago
> the firmware defaults to not trusting bootloaders or drivers signed with the Microsoft 3rd Party UEFI CA key
So they don't trust software signed by Microsoft, but they trust an OS made by Microsoft?
- indrora 4y agoThe 3rd party UEFI CA is a compromise in Secure Boot. MSFT runs the CA but they don't sign binaries, just issue certificates to anyone who asks nicely. Fedora, Ubuntu, and rEFInd were some of the first to get their own certs. So it's more "They don't trust who microsoft trusts"
- mjg59 4y agoMicrosoft absolutely still sign the binaries, and do not issue certs. Everything signed with the 3rd Party UEFI CA was signed by Microsoft, not any third party.