On: Bug 647959 – Add Honest Achmed's root certificate

[axusgrad]

botnets could vouch for their customers?

[ra → axusgrad]

PGP has always included provisions for revocation.

The RFC [1] isn't exactly light reading, but this overview [2] is helpful.

[1] http://tools.ietf.org/html/rfc4880

[2] http://www.openpgp.org/technical/whybetter.shtml

[gcb → axusgrad]

If someone you trust ever vouched for the nods there, yes.