QR codes get a PKI makeover here: EdDSA, CBOR certs, ZLIB, JWKS, and a trust registry squeezed into scan-size limits.

An essay on CAs revoking Windows code-signing certs for malware, and why PKI was never meant to be a software cop.

Deep dive on Windows revocation providers and trust validation, for when CRL/OCSP's good enough is apparently not.