Ressourcen

With the upcoming deprecation of client authentication using publicly trusted TLS certificates, we go over the common use cases for these certificates. We discuss the reasons public trust is often chosen and how to transition away from it.

Sectigo Orchestration Gateway (SOG) ist eine schlanke Lösung für den Sectigo Certificate Manager (SCM), die die Verwaltung von TLS-Zertifikaten vereinfacht. Sie ersetzt komplexe Skripte und Konnektoren durch ein einziges Gateway und bietet eine durchgängige Automatisierung von der Erkennung bis zur Erneuerung. SOG sichert den Zugriff durch Just-in-Time-Abruf von Anmeldedaten (PAM) und bereitet Unternehmen auf kürzere Zertifikatslaufzeiten und postquantenkryptografische Verfahren vor.

Erfahren Sie, wie SOG mit SCM zusammenarbeitet, um eine sichere, skalierbare und richtliniengesteuerte Zertifikatsautomatisierung zu ermöglichen.

Erfahren Sie, wie SOG den SCM erweitert, um den Lebenszyklus von TLS-Zertifikaten in komplexen Hybrid- und Multi-Cloud-Umgebungen zu automatisieren.

Das Sectigo Orchestration Gateway (SOG) vereinheitlicht die Zertifikatsautomatisierung und ersetzt Skripte und Konnektoren durch eine skalierbare, sichere Lebenszyklus-Orchestrierung.

Anthropic recently announced that Mythos has found mathematical weakness in the core algorithm for the third-round NIST PQC candidate HAWK, effectively halving its effective key strength. Mythos also developed a faster attack on a round-reduced version of AES-128. These are not implementation attacks but mathematical attacks on the core cryptography. We discuss the massive implications of these developments.

Because of a change in the drop-dead date, we have observed confusion about the timeline for deprecation of client authentication and mTLS for public TLS certificates. This is an inflexible deadline, and enterprises that are not ready risk outage. In this episode we spell out these dates very clearly.

In our series on digital identity for AI agents, we discuss FAPI 2.0 as an option.

In our ongoing series on digital identity for agents, we have previous discussed use of certificates for authentication. In this episode we describe how cryptographic proof of possession can enable secure authentication using tokens.

MTCs reduzieren den PQC-Overhead durch kompakte Nachweise und ermöglichen so eine schnelle, transparente und skalierbare postquanten-Zertifikatsauthentifizierung.

We survey different strategies for securely authenticating agentic AI, including certificates and SPIFFE. We discuss Zero Trust and the Principle of Least Privileges as applied to agents.

Anthropic has announced its intentions to support SPIFFE/SPIRE with the SPIRE server rooted in an "upstream authority," which will require a root private CA rather than allowing self-attestation for agentic AI.

In our episode 640 we defined SPIFFE, which provides digital identity for agentic workloads. In this episode we explain SPIRE (SPIFFE Runtime Environment), the SPIFFE certificate provisioning protocol.

SPIFFE (Secure Production Identity Framework for Everyone) is a standard for digital identity for agentic workloads. In this episode we explain.