14 ms·

Until Microsoft decides to no longer sign the Linux boot loader shim (for IBM/Red Hat, no less).

• irusensei 7mo ago
  In most cases you can put your computer secure boot in setup mode and roll your own keys.
  • trinsic2 7mo ago
    Until they making CA a requirement, then disable changing the CA settings and it defaults to Microsoft. Then you are fucked.
    • irusensei 7mo ago
      That would make extremely inconvenient if MS ever need to revoke a certificate.