Most systems now "fail closed" because they are based on a code signing chain of trust that has no exceptions. It would be better if some portion of these syste

Most systems now "fail closed" because they are based on a code signing chain of trust that has no exceptions. It would be better if some portion of these systems were made to "fail open" - you don't want a botnet to take over in this situation but you should be able to delegate code signing duties to a new party when the original one goes under or stops supporting a device.