Peter Dolding writes ("Bug#820036: No bug mentioning a Debian KEK and booting use it."): > Yes it one thing to get shim signed by Microsoft. Do remember > Microsoft is free to push out updates to the The Forbidden Signatures > Database(dbx). > > [etc.] I'm afraid I can't make sense of this. You have posted it to debian-devel, but without any kind of sensible explanation of the context. Ian.