This allows you to have a trusted source of updates, and easily install new kernels signed by that source without having to jump through the physical presence proof hoops every time.
Posted Nov 10, 2012 1:36 UTC (Sat) by hummassa (subscriber, #307)
[Link]
IOW: trust Microsoft, they know what they're doing.
HAAHAHAHAHAHAHA
UEFI secure boot kernel restrictions
Posted Nov 11, 2012 20:50 UTC (Sun) by bjencks (subscriber, #80303)
[Link]
I was actually thinking of trusting Red Hat or Canonical, or maybe (hypothetically) my own internal trust anchor installed in my desktop or server fleet.
And if you do use Windows (which several hundred million people do), trusting Microsoft is pretty sensible.