Brummbaer

Sorry but this whole thing is just snake-oil.

You can verify and sign your whole trust chain down to the last shared library and it doesn’t matter when you don’t know what the binary blobs on your TPM / CPU / BIOS / NIC are doing.

The only guarantee to a secure system is openness an all of that signing won’t help you there.

I don’t trust Microsoft, why should I start trusting IBM/Canonical or Poettering now.

If the possibility is there they will happily lock you out of your own hardware.

Interesting, I wonder if you could do the same now with Internet. We know that DSL works over a wet rope.