State of Secure Boot detailed

Red Hat and Fedora developer Matthew Garrett has detailed the “range of subtle changes” that have taken place since he began working on Secure Boot support. In a blog posting, Garrett gives an overview of the current implementation. He explains that the current approach, a shim bootloader, “cunningly called ‘Shim'”, contains a public key under their own control and is signed by Microsoft.