> What is the point of driver signing if a vendor can basically build in a back door and Microsoft doesn't validate that Before you downvote that comment, I'd

> What is the point of driver signing if a vendor can basically build in a back door and Microsoft doesn't validate that Before you downvote that comment, I'd like to remind everyone that this was already happening. Realtek's driver cert was leaked, and a lot of malware used this cert to sign their drivers for _a decade_ until anything happened about it. Microsoft's driver signing workflow is utterly pointless and it doesn't mean anything. Any vendor that takes their security serious should never trust those driver signatures.