Yeah, in the Secure Boot world someone could make their own key and enroll it to be trusted in the computer. But yeah, I imagine that most distros that support Secure Boot probably take the time (and spend the $99) to get signed by Microsoft's key so that they can be trusted and "run out of the box", since that seems to be what non-technical people like for how their computers to work. ("Trisquel is so easy!") This avoids them having to write up documentation for lots of different machines talking about how to enroll the distro's key since there's no standard process.

Reply via email to