Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #190299
| From | <tomas@tuxteam.de> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: GRUB and boot partition |
| Date | 2017-12-26 15:00 +0100 |
| Message-ID | <v0XVU-33a-13@gated-at.bofh.it> (permalink) |
| References | (2 earlier) <v0UOl-Wi-1@gated-at.bofh.it> <v0UY2-100-5@gated-at.bofh.it> <v0V7H-13J-9@gated-at.bofh.it> <v0WZQ-2n9-1@gated-at.bofh.it> <v0XsR-2Rb-5@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, Dec 26, 2017 at 02:24:24PM +0100, Pascal Hambourg wrote: [...] > I read that some UEFI implementations allow the user to manage > secure boot keys. Carefully choose your hardware. > > Oh, by the way I forgot twice to mention another situation when an > encrypted /boot would provide an advantage : when the machine has a > platform firwmare which supports LUKS encryption, such as CoreBoot, > then the on-disk boot components could be entirely encrypted. Granted. But if I were *that* deep in the thicket, I'd either shell out the 5K for a PowerPC workstation (which doesn't seem to have all that ME stuff... or they don't tell you?) *or* wait for lowRISC or similar. Doing encrypted-to-the-bottom in view of Intel ME or AMD TrustZone has a bit of a futile taste to me. Cheers - -- t -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlpCU5gACgkQBcgs9XrR2kbj9wCZAd7YWlsxOiJA5JlA0XBe3/D+ LQcAnjNhBcZ8HjM2Wm9rcpyVDSlM4iz4 =5ed9 -----END PGP SIGNATURE-----
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
GRUB and boot partition microsoft gaofei <wangziheng@outlook.com> - 2017-12-26 03:40 +0100
Re: GRUB and boot partition Pascal Hambourg <pascal@plouf.fr.eu.org> - 2017-12-26 10:50 +0100
Re: GRUB and boot partition <tomas@tuxteam.de> - 2017-12-26 11:40 +0100
Re: GRUB and boot partition Reco <recoverym4n@gmail.com> - 2017-12-26 11:50 +0100
Re: GRUB and boot partition <tomas@tuxteam.de> - 2017-12-26 12:00 +0100
Re: GRUB and boot partition Pascal Hambourg <pascal@plouf.fr.eu.org> - 2017-12-26 12:30 +0100
Re: GRUB and boot partition <tomas@tuxteam.de> - 2017-12-26 12:40 +0100
Re: GRUB and boot partition Reco <recoverym4n@gmail.com> - 2017-12-26 14:00 +0100
Re: GRUB and boot partition Pascal Hambourg <pascal@plouf.fr.eu.org> - 2017-12-26 14:30 +0100
Re: GRUB and boot partition Reco <recoverym4n@gmail.com> - 2017-12-26 14:50 +0100
Re: GRUB and boot partition <tomas@tuxteam.de> - 2017-12-26 15:00 +0100
Re: GRUB and boot partition Pascal Hambourg <pascal@plouf.fr.eu.org> - 2017-12-26 12:20 +0100
Re: GRUB and boot partition <tomas@tuxteam.de> - 2017-12-26 12:30 +0100
Re: GRUB and boot partition Pascal Hambourg <pascal@plouf.fr.eu.org> - 2017-12-26 12:40 +0100
Re: GRUB and boot partition <tomas@tuxteam.de> - 2017-12-26 12:50 +0100
csiph-web