←back to thread

Linux and Secure Boot certificate expiration

(lwn.net)
253 points pabs3 | 3 comments | 18 Jul 25 03:53 UTC | HN request time: 0s | source
Show context
LocalH ◴[19 Jul 25 16:04 UTC] No.44616655[source]▶
It irks me that Microsoft managed to shim their way into the Linux boot process like this. No key signed by Microsoft should ever come into play when booting Linux, on a moral basis.
replies(3): >>44616996 #>>44617151 #>>44617333 #
1. ThrowawayR2 ◴[19 Jul 25 17:15 UTC] No.44617333[source]▶
Libre operating systems are coded to run on machines that conform to Microsoft's hardware standards and conformance tests (Windows HLK) that define Windows compatible hardware. Linux is shimming its way into Windows' boot process, not the other way around, even on machines sold with Linux from the manufacturer.

If you want to be clean on "a moral basis", whatever that means, the FSF would have to create their own hardware standard and persuade OEMs to adhere to it. Good luck.

replies(2): >>44618041 #>>44618442 #
2. jacquesm ◴[19 Jul 25 18:26 UTC] No.44618041[source]▶
This is only the case because we let it be the case. Microsoft should have had zero influence on this. Consumer protection laws have utterly failed us.
3. LocalH ◴[19 Jul 25 19:15 UTC] No.44618442[source]▶
TIL UEFI is apparently a "Windows boot process" /s