|
Authored by: Anonymous on Tuesday, July 03 2012 @ 04:36 PM EDT |
Well, this is my understanding only:
(a) GPLv3 requires that the distributor provides all
necessary information to the next level (user), so that the
next level (user) can recreate a working system and modify
it at will.
(b) For the piece of code in "contact" with the BIOS
loader (and which is naturally a necessary part of the
working system) that means that either:
(i) The user can insert her/his public key into the BIOS
store, and sign that code with the matching private key,
allowing the BIOS loader to satisfactorily check the signed
file in question.
(ii) Somehow the owner of the private part of one of the
public keys in the BIOS allows the user to sign that code.
This in turn can be done IMHO only two ways:
* The distributor published his/her Private Key. Bad idea.
* The distributor offers an online code-signing service:
"Submit a file, we'll return the signature to you"
IMHO,
- if (i) is not true
(and holding it true requires more faith
in the BIOS manufacturers than anyone
wants to have);
and
- neither alternative of (ii) is satisfied,
the resulting system is effectively Tivoized, which is not
satisfactory to GPLv3 requirements.
...
Et voilĂ pourquoi votre fille est muette.[ Reply to This | Parent | # ]
|
|
|
|
|