An essay on CAs revoking Windows code-signing certs for malware, and why PKI was never meant to be a software cop.

Deep dive on Windows revocation providers and trust validation, for when CRL/OCSP's good enough is apparently not.

Private Record Certification revokes anonymous credentials at billion-scale with sub-second latency, because privacy loves paperwork.