On Thu, May 31, 2012 at 03:18:54PM -0400, Adam Jackson wrote: > Not that I want to discourage multiple signatures - quite the > opposite - but could we not install the bootloader after (and based > on) looking at the enrolled keys? Certainly, providing you can boot the software that can examine the enrolled keys. -- Matthew Garrett | mjg59 at srcf.ucam.org