On Tue, Aug 1, 2017 at 7:50 PM, cooloutac <raahe...@gmail.com> wrote: > Qubes doesn't support secure boot unfortunately. I think its batshit crazy > to consider a pc even reasonably secure without it.
Secure boot in reality is quite far from the boot chain panacea its name may suggest. If you haven't already, I'd suggest reading Joanna's "Intel x86 considered harmful" paper [1] and checking out Trammell Hudson's Heads project [2]. FWIW, the systems I currently believe have the most secure boot chains do not involve UEFI at all. Regards, Jean-Philippe [1]: https://blog.invisiblethings.org/papers/2015/x86_harmful.pdf [2]: http://osresearch.net/ -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CABQWM_C1sdiKTX6e6ik_popWiZGFycxxTEvO7W4QHYsXccjWtw%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.