Would it not be reasonable to have two keys -- one for signing the boot loader and other executables up through launch, and another for signing device firmware?
Power management, mobile and firmware developer on Linux. Security developer at Aurora. Ex-biologist. mjg59 on Twitter. Content here should not be interpreted as the opinion of my employer. Also on Mastodon.
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
UEFI-specific keys?
Date: 2012-02-16 08:42 pm (UTC)Would it not be reasonable to have two keys -- one for signing the boot loader and other executables up through launch, and another for signing device firmware?