Secure/verified boot?

[GeNDALON]

Verified boot isn't about locking down the bootloader. It's about knowing what software is running on your phone. With an unlocked bootloader, you control, when the device loads, you know that the O/S itself hasn't been compromised. If you want to load a new O/S onto the device, then you need to backup first and then everything is wiped clean.
This process prevents persistent malware and is a requirement for GrapheneOS and CalyxOS.

It would be really nice if Shiftphones supported this function so that we have a chance of using these more secure versions of Android.

Do Shiftphone feature something like this?

 

[@Lhotze]

The latest Shift6mq with Android 10 has this feature.
I don't know about the other devices.

Greetz

 

[GeNDALON]

Thanks. I want to investigate further before I trouble those O/S dev teams. Is there somewhere to get more info to show them?

 

[dirk.wolf]

I want to investigate further before I trouble those O/S dev teams.

You don't need to be afraid of bothering anyone! Both here in the forum and the developers will be happy to help you.

 

[@Lhotze]

Is there somewhere to get more info to show them?

What do you mean exactly?
Every System since Android 8 should have verified boot.
Its implemented in Aosp, that's the reason why Lineageos or others should have these to.
Greetz

 

[amartinz]

The SHIFT6mq supports this, as well as SHIFT5me and SHIFT6m.

FYI, we also open sourced the bootloader for SHIFT6mq.