Comment on The creator of systemd wants your entire system validated by SecureBoot
jollyrogue@lemmy.ml 3 days ago
This is needed. Servers need it, and it would be a nice feature to enable for personal systems. We would need to be able to build our own images with our own keys to really make this worthwhile. Especially with programs in my bin dir I’ve compiled or downloaded.
Do I trust Lennart to not do something asinine to turn this into a shit show? I do not. This would be better if it was someone who has security experience and system design cred.
tomalley8342@lemmy.world 3 days ago
I can’t imagine anyone sane would hold onto the belief that it will remain just “a nice feature to enable” after looking at the historical encroachment of commercial interests in mobile boot chain setups. I tell you the truth that after widespread adoption this WILL turn into a “not nice feature that you cannot disable”, and you can forget about enrolling your own keys as well.