"We don't have an ETA for a new signature from MS which would unblock us. At *best*, we're expecting a few weeks. It's out of our control."
Debian has been unable to build their installer for almost a month now because of a SNAFU and only Microsoft can really unblock it. Wow.
SecureBoot, a platform 100% under the control of Microsoft, is working as planned.
@joeyh Shim? I think the word you're looking for is "sham."