| |||||||||||||
Implementing UEFI Secure Boot in FedoraImplementing UEFI Secure Boot in FedoraPosted Jun 1, 2012 1:49 UTC (Fri) by Cyberax (✭ supporter ✭, #52523)In reply to: Implementing UEFI Secure Boot in Fedora by slashdot Parent article: Implementing UEFI Secure Boot in Fedora
They can't. So they'll just revoke your key and blacklist your company.
(Log in to post comments)
Implementing UEFI Secure Boot in Fedora Posted Jun 1, 2012 2:26 UTC (Fri) by slashdot (guest, #22014) [Link]
Is there really a revocation system for secure boot?
The way the system is described, it gives me the impression that there is just a static key/certificate, and you can't blacklist anything.
Implementing UEFI Secure Boot in Fedora Posted Jun 1, 2012 2:35 UTC (Fri) by jk (guest, #31383) [Link]
There is indeed a revocation system: software is able to add blacklist entries, which may be a hash of a binary, or a key (revoking access to all binaries relying on that key).
However, updating the revocation lists requires your updates to be signed with a key that is already present in firmware.
|
|||||||||||||