4 ms·Well, shim also measures whatever certs it uses, so it's not a complete loss.by mjg59 4y agoWell, shim also measures whatever certs it uses, so it's not a complete loss.amluto 4y agoBut if anything other than shim, but signed by the same key, is used, then there’s no way to detect that, right?mjg59 4y agoCorrect.