All things Microsoft
3 posts • Page 1 of 1
If we move away from locally generated initrds, things become a lot simpler. If the distribution vendor generates the initrds on their build systems then it can be attached to the kernel image itself, and thus be signed and measured along with the kernel image, without any further work.
My opinion ^_^ may differ from yours. That's OK. Difference makes us humans, not robots.