Comment by dingaling

14 days ago

I absolutely do not want to be constrained to a single system cert store controlled by the OS vendor.

That last part does sound like a bad deal based on recent anti-owner-control habits like sealed immutable system volumes, but I definitely want to be constrained to a single system cert store controlled by the owner of a computer. Which works for the corporate case as well as the personal one.