Well, this just convinced me to snag a cert for myself. Are there any services like keybase for sharing S/MIME public keys?
No more public key exchange. I checked and Thunderbird often checks the CRL for the certificate I have. I also checked revocation of that certificate and thunderbird shows a big warning about it being invalid. (although it doesn't specify expired or revoked).