“As it turns out, because PFX [aka PKCS12] is so comprehensively broken it's far easier to take the style guide's "try and do this to demonstrate good style" and turn it around into PFX's "do this to demonstrate bad style". As a result, I've decided to do a rant instead of a proper discussion like the style guide. Rants are far more fun to write anyway. So, here's the PFX anti-style guide, or 'How not to design a crypto protocol/standard'.”