On: Linux and Secure Boot certificate expiration (2025)

[Cloudef]

> Secure boot prevents tampering of your kernel and/or bootloader, nothing about Linux prevents this from being possible.

By trusting another chain of trust and firmware binary blobs involved in booting your PC.

Secure boot exists only as one of the puzzle pieces for remote attestation for MS and trusted OEMs, nothing to do with your security.

[Borealid → Cloudef]

If you want yourself to be the root of trust, you CAN generate and use your own keys for secure boot.

[chlorion → Cloudef]

>By trusting another chain of trust and firmware binary blobs involved in booting your PC.

So what? I'm still preventing a random person from tampering with my bootloader?