This makes no sense. Microsoft uses separate CAs (read: separate root certificates) to sign Windows vs Linux bootloaders. Both CAs have to be trusted. They co

This makes no sense. Microsoft uses separate CAs (read: separate root certificates) to sign Windows vs Linux bootloaders. Both CAs have to be trusted. They could also, in theory, be revoked separately. There is no reason the "third party" CA couldn't be run by Red Hat. It's done by MS out of convenience.