To view parent comment, click here.
To read all comments associated with this story, please click here.
There's no reason for a distribution to get itself signed by Microsoft if they're happy documenting how to handle key enrolment on every different firmware implementation. Many distributions aren't happy having that as a requirement.
I take it that you're not willing to take me up on my offer? You're the one who said that this functionality would only be included on the most expensive boards. If you're right, you get a free motherboard and the satisfaction of proving me wrong. If you're sure you're right, this should be a great opportunity.
Hmmmm, I'm afraid you're squirming now. The main and inescapable point is that you're putting how you control your computer in the hands of Microsoft and what manufacturers will implement now and in the future. You're trying to paint this as some benefit to users who can supposedly choose what their computers will boot.
I think we can all see where your pay cheque is coming from here.
Edited 2013-02-09 21:28 UTC





Member since:
2005-07-06
Heh. Let's put it this way, if there was any confidence in this then Linux distributions wouldn't be getting themselves key-signed by Microsoft, would they?
You will be reporting the demise of pretty much all key management on all but high-end systems on your blog in future and I will happily be around to point you back to this........ I haven't heard anything from you about how Microsoft is going to enforce this. Motherboards will have Microsoft's key and that's all that matters.
The only reason Secure Boot can be disabled is because of the massive amount of bootable software users and companies use and still need to use on their hardware - namely previous versions of Windows, imaging software and VMware - which will be dropped off the face of the map at a later date.
Chromebooks implement Secure Boot in the way that they do because it's more difficult to differentiate a legitimate user who has physical access and someone more malicious. I can understand it because of their function, but I hope Google will find a way to do it in future. Secure Boot on PCs will marginalise software you can boot and make hardware ridiculously expensive.
You also sail right over Windows on ARM which is a platform that has no such legacy problems for Microsoft and where you get absolutely no quarter given whatsoever. That's where we will end up.
Edited 2013-02-05 22:18 UTC