A question that has occupied me for a long time and I still haven't got the answer. It's about Apple's Internet Recovery. When I read through quite a few pages from Apple, I saw that a signed .dmg was loaded into the recovery partition in order to protect against manipulated software, the same applies to Internet recovery.
Let's get to my question.
When the Mac loads the signed dmg file from the partition, it must say somewhere that the Mac should only take the dmg where the checksum is correct. Where is that listed? Has it been specially built into the hardware so that manipulation of the software, for example when system integration protection is deactivated, does not interest the Mac or is it a software issue? I ask myself the same question about Internet recovery.
Where is the software installation saved from the Internet?
Does the signing only apply using the methods mentioned above, or also with a boot stick?