@Daojoan@mastodon.social and there could be a repository to report bad activity that would notify everyone in the bad actor's cert chain so they can take action, some kind of mechanism to revoke a cert etc.