Zorin only Secure Boot on or off?

[swarfendor437]

"Linux administrators will still need the Microsoft Unified Extensible Firmware Interface (UEFI) Third Party Marketplace CA 2011 certificate to utilize Secure Boot with leading Linux distributions. [6]"

Extract from NSA advisory on BlackLotus malware:

Latest security news

Here is an interesting article on the developer who wrote the first shim for Linux kernel to boot in UEFI years ago about the current SBAT fiasco. I am not posting the page/title as it includes an expletive that would prevent me from posting: " Long version: When UEFI Secure Boot was specified, everyone involved was, well, a touch naive. The basic security model of Secure Boot is that all the code that ends up running in a kernel-level privileged environment should be validated before execution…