> It's unclear to me why they're being so aggressive in this area.. A signed bootloader with TPM is the first step to implementing an OS that can only run sign

> It's unclear to me why they're being so aggressive in this area.. A signed bootloader with TPM is the first step to implementing an OS that can only run signed code. The long term goal is to be like Android (who recently flipped to requiring all APK's to be signed by Google. Almost zero user push back) and iOS in this regard. MS is looking down the road and they want a locked down OS as well. They will pitch it as enhancing security and protecting children more than likely. There is a good chance that in 5-10 years Linux will be the only platform that allows unsigned code to run. I hope I am wrong.