> Many Secure Boot implementations let you load your own keys.
And there is no promise that this will not change.
And there is no promise that this will not change.
Might as well ditch TLS since soon you'll only be able to get certs for government approved content.
(In a sense, dropping TLS is the correct response... In the sense, of not using the limited set of services. The corresponding response here is to not buy PCs with SecureBoot present in any imposing way, which may mean boycotting "modern" computers that are no longer general, user-controlled, devices if, in the future, they all are locked to Microsoft out of the box.)