Re:Apple T2 Security Chip: Security Overview [pdf]
by amaccuish on Tuesday October 30, 2018 @02:53PM
(#18340127)
> NOTE: There is currently no trust provided for the the Microsoft Corporation UEFI CA 2011, which would allow verification of code signed by Microsoft partners. This UEFI CA is commonly used to verify the authenticity of bootloaders for other operating systems such as Linux variants.
[ Parent
| on HN ]
Re:Apple T2 Security Chip: Security Overview [pdf]
by akvadrako on Tuesday October 30, 2018 @10:51PM
(#18343002)
Thank god - you wouldn't want that enabled by default.
Some people might want secure boot with their own certs to work with Linux, but I don't see the gain in security if you are using a generic boot loader.