From owner-freebsd-questions@FreeBSD.ORG  Fri Jun  8 16:11:49 2012
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id D6F641065674
	for <freebsd-questions@freebsd.org>;
	Fri,  8 Jun 2012 16:11:49 +0000 (UTC) (envelope-from jhs@berklix.com)
Received: from tower.berklix.org (tower.berklix.org [83.236.223.114])
	by mx1.freebsd.org (Postfix) with ESMTP id 592EE8FC17
	for <freebsd-questions@freebsd.org>;
	Fri,  8 Jun 2012 16:11:49 +0000 (UTC)
Received: from mart.js.berklix.net (p5DCBF906.dip.t-dialin.net [93.203.249.6])
	(authenticated bits=0)
	by tower.berklix.org (8.14.2/8.14.2) with ESMTP id q58GBeYs074575;
	Fri, 8 Jun 2012 16:11:41 GMT (envelope-from jhs@berklix.com)
Received: from fire.js.berklix.net (fire.js.berklix.net [192.168.91.41])
	by mart.js.berklix.net (8.14.3/8.14.3) with ESMTP id q58GBi02019663;
	Fri, 8 Jun 2012 18:11:44 +0200 (CEST) (envelope-from jhs@berklix.com)
Received: from fire.js.berklix.net (localhost [127.0.0.1])
	by fire.js.berklix.net (8.14.4/8.14.4) with ESMTP id q58GBW0J097808;
	Fri, 8 Jun 2012 18:11:38 +0200 (CEST)
	(envelope-from jhs@fire.js.berklix.net)
Message-Id: <201206081611.q58GBW0J097808@fire.js.berklix.net>
To: grarpamp <grarpamp@gmail.com>
From: "Julian H. Stacey" <jhs@berklix.com>
Organization: http://berklix.com BSD Unix Linux Consultancy, Munich Germany
User-agent: EXMH on FreeBSD http://berklix.com/free/
X-URL: http://www.berklix.com
In-reply-to: Your message "Wed, 06 Jun 2012 16:13:45 EDT."
	<CAD2Ti2_SHrW5U3FM5FDuuddkBijKs_z+nsaViQBT6uF9X3b8Eg@mail.gmail.com> 
Date: Fri, 08 Jun 2012 18:11:32 +0200
Sender: jhs@berklix.com
Cc: freebsd-questions@freebsd.org
Subject: Re: UEFI Secure Boot Specs - And some sanity 
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Jun 2012 16:11:49 -0000

grarpamp wrote:
> Isn't there a lot of needless handwaving going on when the spec is
> pretty clear that installing your own complete PKI tree will all
> boil down to what is effectively a jumper on the motherboard?

The hope for a jumper is insufficient.

Cracking open laptops is no fun. It's not often that they unscrew
easily; usually considerable fear of breaking innards or chassis.

Hoping a jumper Might be under an easily unscrewable panel seems unlikely.

Cheers,
Julian
-- 
Julian Stacey, BSD Unix Linux C Sys Eng Consultants Munich http://berklix.com
 Reply below not above, cumulative like a play script, & indent with "> ".
 Format: Plain text. Not HTML, multipart/alternative, base64, quoted-printable.
	Mail from @yahoo dumped @berklix.  http://berklix.org/yahoo/