[sdwalker/sdwalker.github.io] 54e701: This week's update

2024-04-14 Thread Stephen Walker via openwrt-devel
The sender domain has a DMARC Reject/Quarantine policy which disallows sending mailing list messages using the original "From" header. To mitigate this problem, the original message has been wrapped automatically by the mailing list software.--- Begin Message --- Branch: refs/heads/master

Re: OpenWrt One / project update

2024-04-14 Thread Bjørn Mork
Maybe it is possible to deploy the system with secure boot and a protected IDevId key by default, but allowing the user/owner to erase the key and disable secure boot? This way all use cases could be supported, including playing with the BL2 code etc. (I'm sure all of you have noticed, but I'm

Re: OpenWrt One / project update

2024-04-14 Thread Michael Richardson
Bjørn Mork wrote: > Michael Richardson writes: >> Having orange and red pieces "secured" *does* mean that u-boot updates would >> have to come from openwrt. > Does it? Is it possible to modify the BL2 to verify signatures of the > BL31 and BL32 stages only? I don't