Ressourcen

In this episode we discuss the dual nature of a public certificate as both a file and part of a holistic service that lasts until its expiration.

With a few easy tweaks, you can get your track to listeners most likely to love it. Learn more about how to modify your track to make it eligible.

White hat researchers have raised concerns about FIDO 2 (AKA WebAuthn). We explain.

EUCLEAK, a newly revealed side-channel vulnerability, can clone the contents of a YubiKey. We talk about the attack and its significance.

There are still products and operating systems that don't support ACME. We explore what happens to them when 90-day SSL certificates become required.

PQC will move us from cryptographic homogeneity to cryptographic heterogeneity, with multiple KEMs and DSAs eventually expected as ongoing standards.

We introduce pkimetal, an open source project from Rob Stradling that allows CA to write to many popular linters with a single integration.

An enterprise SSL subscriber recently used a Temporary Restraining Order to prevent the proper revocation of misissued certificates. We explain.

NIST recently released PQC algorithmic standards in FIPS-203, 204, and 205. We describe what is necessary for enterprises to begin using these algorithms.

We detail mandatory revocation periods for leaf certificates and intermediates and explain when a 24-hour versus a 120-hour revocation deadline applies.