News for hackers. Stuff that matters.

A comment on Linux and Secure Boot certificate expiration. Parent comment

Re:Linux and Secure Boot certificate expiration by deknos on Friday July 18, 2025 @05:32AM (#44602770)
orrr we just have official institutions which do this and enforce vendors to add certificates from other trusted parties. not only microsoft is able to do this. also microsoft already also had fallout regarding signing.

and secure boot is still the antichrist, but we have to live with them.

[ Parent | on HN ]
Re:Linux and Secure Boot certificate expiration by danudey on Friday July 18, 2025 @12:18PM (#44606483)
The problem here isn't that Microsoft is the one signing the shim, but that we can't trust systems manufacturers to update their systems, or even to have systems that can be correctly updated.

A public signing institution (or at least, a not-for-profit one) would be a great idea, but it wouldn't solve the core issue that we're worried about.

[ Parent | on HN ]