■Windows 8 certification does not require that UEFI secure boot can't be disabled
■Windows 8 startup does not require that the user be enables UEFI secure boot.
■Windows 8 certification does not prevent the system shipping with any keys other than Microsoft's.
■A system that ships with UEFI secure boot enabled and only includes Ubuntu's signing keys will only securely boot Ubuntu operating systems.
See the thing with this is that it is entirely down to what the OEMs decide to provide in their hardware implementation and that is fundamentally down to what purchasers want from their systems. Microsoft have no say other than it'll need a Microsoft key and secure boot support if they want to brand it as a Windows 8 PC, which makes sense.
It's not hard to see why, for example, a bank that runs Windows on it's corporate desktop might not want anyone booting from another OS that will be able to compromise system security and so will prefer systems that follow that approach. Equally systems sold to the general public will more likely have a flexible approach to how they're used.
It's about having the freedom to choose what functionality is in the PC you buy. Isn't that supposed to be a good thing?
no subject
■Windows 8 certification does not require that UEFI secure boot can't be disabled
■Windows 8 startup does not require that the user be enables UEFI secure boot.
■Windows 8 certification does not prevent the system shipping with any keys other than Microsoft's.
■A system that ships with UEFI secure boot enabled and only includes Ubuntu's signing keys will only securely boot Ubuntu operating systems.
See the thing with this is that it is entirely down to what the OEMs decide to provide in their hardware implementation and that is fundamentally down to what purchasers want from their systems. Microsoft have no say other than it'll need a Microsoft key and secure boot support if they want to brand it as a Windows 8 PC, which makes sense.
It's not hard to see why, for example, a bank that runs Windows on it's corporate desktop might not want anyone booting from another OS that will be able to compromise system security and so will prefer systems that follow that approach. Equally systems sold to the general public will more likely have a flexible approach to how they're used.
It's about having the freedom to choose what functionality is in the PC you buy. Isn't that supposed to be a good thing?