*countable infinities only

[Peter Jones]

On 05/31/2012 04:32 PM, Adam Jackson wrote:
> On 5/31/12 3:23 PM, Peter Jones wrote:
>> On 05/31/2012 03:18 PM, Adam Jackson wrote:
>>> Not that I want to discourage multiple signatures - quite the
>>> opposite - but could we not install the bootloader after (and based
>>> on) looking at the enrolled keys?
>>
>> Well, that adds complexity and makes files bigger and more numerous, but it
>> could be done. We all know how dangerous files are.
>
> So, having bothered to think about it a bit:
>
> If the firmware can have multiple keys enrolled (and I think it can) then you
> wouldn't need to do this: the ISO only has one loader, so you know what it's
> signed with a priori, and wouldn't need to conditionalize.

You're correct that DB (the firmware variable that holds the list of okay keys
and hashes) is a list, not a single slot.

-- 
         Peter