This post will help to provide historical context and demystify what’s under the hood of Heads, PureBoot, and other tools to provide Trusted Boot. I will not be presenting anything new in this article; I merely hope to provide a historical timeline and a curated list of resources. Intro The Librem Key cryptographically verifies the system’s integrity and flashes red if it’s detected tampering I’ve always felt bad about two things: Because I run QubesOS, I usually disable “Secure Boo...