[prev in list] [next in list] [prev in thread] [next in thread] 

List:       centos
Subject:    Re: [CentOS] Boot failed on latest CentOS 7 update
From:       Gordon Messmer <gordon.messmer () gmail ! com>
Date:       2020-08-02 22:54:08
Message-ID: fed189d5-1ed0-2a33-95aa-21d43a29d7cf () gmail ! com
[Download RAW message or body]

On 8/2/20 1:19 PM, John Pierce wrote:
> One of the things that bugs me about PKI trust chains like this, what
> happens if the unthinkable happens, and Microsoft's RootCA gets compromised
> and has to be revoked... does that mean every single piece of UEFI
> hardware  out there needs a BIOS upgrade?


Yes.   They'll be vulnerable to malware signed by the old CA until 
they're updated.

That's better than systems without a PKI trust chain, which are 
vulnerable all of the time.


_______________________________________________
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos

[prev in list] [next in list] [prev in thread] [next in thread]