The implementation will use any keys used in db, and the Suse approach lets us extend this to a separate key database with a consistent and non-arcane management UI. This is a far cry from being "cryptographically locked with a pre-enrolled certificate chain" - it's cryptographically locked with whatever set of keys you want to use.
Posted Aug 13, 2012 2:58 UTC (Mon) by JoeBuck (subscriber, #2330)
[Link]
I'm delighted to see how open you are to adopting improvements proposed by competitors; it's a refreshing change from the "NIH" attitudes I see so often.