Re:Brave New Trusted Boot World
by vetinari on Wednesday October 26, 2022 @12:11PM
(#33345831)
Depends. In theory it is fine, in practice it is a big ball of mud.
I'm starting to like Apple's approach more. It allows to have multiple OSes installed and each to have different level of trust. In UEFI, the equivalent would be that you could have Secure-core like security for one installed instance, 3rd party UEFI-enabled Secure Boot for another and no Secure Boot for yet another installed OS. Unfortunately, in UEFI it is all-or-nothing instead.
I'm starting to like Apple's approach more. It allows to have multiple OSes installed and each to have different level of trust. In UEFI, the equivalent would be that you could have Secure-core like security for one installed instance, 3rd party UEFI-enabled Secure Boot for another and no Secure Boot for yet another installed OS. Unfortunately, in UEFI it is all-or-nothing instead.