Enabling Secure Boot on it's own doesn't limit user choice. It's having Secure Boot without the ability for the user to determine which keys are allowed and which aren't that limits user choice. And UEFI doesn't inherently require that control of the keys be place in someone else's hands. It's entirely within spec to allow the user to boot into the UEFI BIOS and load their own keys and remove keys that're already there, and with that capability any OS the user wanted could be readily booted.

The only flaw is that it prevents a company like Microsoft from locking in their own software as the only software that's runnable. But that's not a security flaw, and shouldn't be treated as such.

[ Reply to This | Parent | # ]

• Exactly! - Authored by: Anonymous on Wednesday, September 19 2012 @ 06:24 PM EDT