|
Authored by: Anonymous on Monday, July 02 2012 @ 07:32 PM EDT |
If you hand me a CD and say "this is the latest signed Ubuntu" and I
shove it in my drive, I'd somehow like to know that it was really signed by
Canonical. How do you reconcile that with letting everybody sign
stuff
If I hand you a CD and say it's the latest Ubuntu and you
only have the Canonical key installed in your bootloader, you can be pretty darn
certain the signed bits are from Canonical.
If I hand you a CD that has
signed bits I've modified, I'd also need to hand you the key to install in your
BIOS and tell you to install that key to run my signed bits (or to turn off
secure boot, but I assumed you meant to keep secure boot enabled).
Nobody
needs to hand out their private signing keys.[ Reply to This | Parent | # ]
|
- Right. Except. - Authored by: Anonymous on Monday, July 02 2012 @ 07:59 PM EDT
- Right. Except. - Authored by: Anonymous on Monday, July 02 2012 @ 08:17 PM EDT
|
|
|
|