Microsoft is updating Windows code signing with new certificates, stronger algorithms, and post-quantum cryptography planned for 2027.