Matthew Garrett ([personal profile] mjg59) wrote 2011-10-20 05:51 pm (UTC)

Re: So the OS can modify the keys?

The update needs to be signed with the private half of a KEK that's in the system's KEK database. Malware won't have one of those.
(53 comments)

Post a comment in response:

If you don't have an account you can create one now.
HTML doesn't work in the subject.
More info about formatting

If you are unable to use this captcha for any reason, please contact us by email at support@dreamwidth.org

 
Notice: This account is set to log the IP addresses of everyone who comments.
Links will be displayed as unclickable URLs to help prevent spam.