[Linux-aus] UEFI Secure Boot - Precis of List Comments and proposals

[Tim Serong]

On 07/08/12 10:00, John Ferlito wrote:
> On Mon, Aug 06, 2012 at 09:33:05PM +1000, Brent Wallis wrote:
>> IMHO, the first step in what will probably be a very long road is to find
>> out what Hardware Manufacturers are going to do with UEFI.
>> Specifically, we need to find out about how they plan to implement key
>> control
>> and
>> How easy it will be for authorised users to implement options 2 and 3.
> 
> I think this is actually the key issue and what we should be
> concentrating on.

+1

> As currently implemented technically UEFI has bugs etc but that stuff
> will go away over time. The key issue is lockout and that's what I
> think we need to address the most. Another thing in it's favour is it
> is the least complicated message to get across as it is for the most
> part the least technical.

As another reference, please see
http://www.suse.com/blogs/uefi-secure-boot-overview/ - not that it says
exactly what SUSE is doing yet, but it's a pretty good high level
writeup of WTF this thing is, and what the main problem/s is/are.

Regards,

Tim