I've never fully understood the secure boot thing.
In summary, does any open source binary need to be signed by Microsoft in order for it to be loaded on most hardware which will have MS keys pre-loaded.
Doe that mean hobbyist opens source can't load because they don't have the relationship with MS that Canonical and Redhat do?
What about BSDs?
Tell me I'm wrong!