Re:Linux can’t be installed on a recent Lenovo laptop
by coldtea on Wednesday September 21, 2016 @01:30PM
(#12550346)
>Or get to learn something about key management. A centralized key is not secure. A secure key is not centralized.
A centralized key IS secure, just not AS secure as a not private key.
(That's theoritically: in practice it can be even safer than a private key, because most end users are incompetent in managing their keys much more than the central entity would usually be).
And it's wrong to think it as a key in the sense of a physical key. It actually used as a signature.
You can't have "private signatures" because the very purpose of a signature is to verify that the thing it signs is signed by a specific (and in the case of operating systems, central: the vendor) entity.
An OS the user signs itself is worthless, as the OS data he signed could have come from anywhere or tampered, etc, before the signing.
A centralized key IS secure, just not AS secure as a not private key.
(That's theoritically: in practice it can be even safer than a private key, because most end users are incompetent in managing their keys much more than the central entity would usually be).
And it's wrong to think it as a key in the sense of a physical key. It actually used as a signature.
You can't have "private signatures" because the very purpose of a signature is to verify that the thing it signs is signed by a specific (and in the case of operating systems, central: the vendor) entity.
An OS the user signs itself is worthless, as the OS data he signed could have come from anywhere or tampered, etc, before the signing.