I fail to see how the ability to have all the bits on my unencrypted uefi partition be signed is such a doom and gloom scenario. Having a world writeable initr

I fail to see how the ability to have all the bits on my unencrypted uefi partition be signed is such a doom and gloom scenario. Having a world writeable initrd - that is an fs image with executables to be run as root before any other security settings have been enabled (etc) has always struck me as a bad idea. Yes I'm aware that this technology, like literally every other technology ever invented (from the pointy stick all the way up), can be used for evil. That is a human problem not a "this technology exists problem"... > ...the groundwork for the creation of an allmighty authority with the ability to "sanction" some (parts of) operating systems, but not others "We must backdoor/ban all crypto because imagine what the criminals would do with it!"