4 ms·
The 3rd party UEFI CA is a compromise in Secure Boot. MSFT runs the CA but they don't sign binaries, just issue certificates to anyone who asks nicely. Fedora,
by indrora 4y ago
The 3rd party UEFI CA is a compromise in Secure Boot. MSFT runs the CA but they don't sign binaries, just issue certificates to anyone who asks nicely.
Fedora, Ubuntu, and rEFInd were some of the first to get their own certs.
So it's more "They don't trust who microsoft trusts"
- mjg59 4y agoMicrosoft absolutely still sign the binaries, and do not issue certs. Everything signed with the 3rd Party UEFI CA was signed by Microsoft, not any third party.