[coreboot-gerrit] Change in coreboot[master]: security/vboot: Decouple measured boot from verified boot

[Patrick Georgi (Code Review)]

Patrick Georgi has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/35077 )

Change subject: security/vboot: Decouple measured boot from verified boot
......................................................................

Patch Set 70:
> Patch Set 70:
> Since it already seems to be hard enough to get consensus on this patch as is, I'd like to keep the discussions focused on what this patch does vs. the previous implementation (hopefully we can come to agree that it doesn't reduce any security guarantees, and merge it). Let's leave concerns that the currently implementation doesn't solve either for another time.

Sorry, I wasn't clear enough there: any such change should be in a future commit. This really is complex enough as is.