Revocations

• Staying secure means keeping up with fixes
• Replace older software with known security holes
• Revocations are hard
• DBX doesn’t work as designed
• SBAT to the rescue!
• New revocations are pushed out from time to time
• Might be from firmware updates
• Might be from new versions of shim or other software
• Shim (and GRUB, etc.) will not be trusted forever
• Keep up to date
• LTS?!?