OS and (not) PKIX