Comment on Linux and Secure Boot certificate expiration (2025)parentComments−Cloudef2moSecure boot prevents tampering of your kernel and/or bootloader, nothing about Linux prevents this from being possible.By trusting another chain of trust and firmware binary blobs involved in booting your PC.Secure boot exists only as one of the puzzle pieces for remote attestation for MS and trusted OEMs, nothing to do with your security.−Borealid2moIf you want yourself to be the root of trust, you CAN generate and use your own keys for secure boot.−chlorion2moBy trusting another chain of trust and firmware binary blobs involved in booting your PC.So what? I'm still preventing a random person from tampering with my bootloader?
Comments
By trusting another chain of trust and firmware binary blobs involved in booting your PC.
Secure boot exists only as one of the puzzle pieces for remote attestation for MS and trusted OEMs, nothing to do with your security.
If you want yourself to be the root of trust, you CAN generate and use your own keys for secure boot.
So what? I'm still preventing a random person from tampering with my bootloader?