@fribbledom Yeah, that's what happens when you agree to make Microsoft the gatekeeper to your computer...

@fribbledom but Microsoft loves Linux !!!!

@fribbledom I so don't regret, that my windows install now resides on my backup server as a compressed disk image...

@fribbledom That confirms that my old mantra regarding Windows: There’s a place for Windows - only in a virtual machine in a segregated network!

@fribbledom I knew it was a good idea to scrub windows completely! https://steinar.bang.priv.no/2022/07/31/installing-debian-11-bullseye-using-pxe-boot-on-an-acer-aspire-5-a515-45-laptop/

Actually I didn't know... on previous laptops I almost never rebooted into windows anyway, so I just didn't want to waste the disk space this time around.

Also, scrubbing windows would save me having to mess about with having to preserve and resize the windows partition(s)

@fribbledom To be fair, this is nothing Microsoft specific, some (Enterprise) Distros will start to ship these as well. These should be the official upstream lists from: https://uefi.org/revocationlistfile

It's mainly an oversight of these distros to not get newer signatures. (Unless you point out, that Microsoft denies these to them or didn't respond in time, which is not completely unexpected.)

@fribbledom Source for this? The UEFI revocation list is hardcoded and the only thing I can find is these reported CVEs https://www.bleepingcomputer.com/news/security/microsoft-blocks-uefi-bootloaders-enabling-windows-secure-boot-bypass/

@fribbledom the Windows updates shouldn't change anything about this on an existing machine – the keys for this are hardcoded.

However, one should be wary of new hardware or firmware updates no longer having the keys hardcoded.