Re:SUSE details its EFI Secure Boot plans
by ajross on Friday August 10, 2012 @11:22AM
(#4366525)
Sure, but the practical truth is that the Dane is here to stay anyway because all your neighbors already paid him off.
Secure boot isn't going away. It has some value to consumers (albeit not nearly as much as some people want to think). So we have to live with it as best as we can. The Fedora/SUSE compromise (load a shim which then checks a signature for the real bootloader) seems straightforward. The Ubuntu one (sign a shim that will load anything) is preferable to me personally, but IMHO isn't likely to survive as it's basically a security hole by definition.
Secure boot isn't going away. It has some value to consumers (albeit not nearly as much as some people want to think). So we have to live with it as best as we can. The Fedora/SUSE compromise (load a shim which then checks a signature for the real bootloader) seems straightforward. The Ubuntu one (sign a shim that will load anything) is preferable to me personally, but IMHO isn't likely to survive as it's basically a security hole by definition.