Post #3973166
2026-07-21 00:08 UTC
@mjg59@nondeterministic.computer if I remember correctly, you can install your own "UEFI CA", and replace the default ones.
Of course, that has the drawback that you then need to handle your own "UEFI CA"...
Replies (1)
-
@mjg59@nondeterministic.computer 2026-07-21 00:11
@crlf@infosec.exchange you can, but that's not the situation I'm talking about - people may want to stay in the existing ecosystem but not trust the Windows keys (because the Windows bootloader doesn't have a good security track record), and be able to automate that (which rules out manual configuration)