Who do you trust to maintain a GNU/Linux community key? The Free Software Foundation, which takes an extreme position that even excludes Fedora? The Linux Fou

Who do you trust to maintain a GNU/Linux community key? The Free Software Foundation, which takes an extreme position that even excludes Fedora? The Linux Foundation, which talks about compliance with proprietary vendors' requirements? Linus Torvalds, who takes no issue with TiVO? There is no single vendor I trust with the decision about which distro's bootloaders can be signed. I only trust the distro I am using, and only because I can switch to another distro at will (which I have done three times since I began experimenting with Linux all those years ago). That is the problem with the UEFI design: it does not let me, the user, decide who to trust, unless I am technically adept enough to install custom keys (I personally am, but even a lot of people at the local LUG and 2600 meetups are not). What we really need a system that allows me to install whatever OS I want, and allows that OS to optionally enable bootloader signing with its own key. I should be able to hit a button while booting up to enable a special "OS installation mode," which will boot from a USB device or a DVD to install an OS. During that process, the OS installer can load keys for bootloader signing. The user should always be able to install the OS of their choice, and should not have to rely on Microsoft or anyone else to "approve" a bootloader, OS, or anything else.