An essay on CAs revoking Windows code-signing certs for malware, and why PKI was never meant to be a software cop.