Resource Library

Observed on August 1, World Wide Web Day recognizes how deeply the web has transformed the way people communicate, work, shop, and access information. This day encourages us to reflect on just how far...

In our series on digital identity for AI agents, we discuss FAPI 2.0 as an option.

In our ongoing series on digital identity for agents, we have previous discussed use of certificates for authentication. In this episode we describe how cryptographic proof of possession can enable secure authentication using tokens.

MTCs reduce PQC overhead using compact proofs, enabling fast, transparent, and scalable post-quantum certificate authentication.

We survey different strategies for securely authenticating agentic AI, including certificates and SPIFFE. We discuss Zero Trust and the Principle of Least Privileges as applied to agents.

SCOTTSDALE, Ariz. — July 22, 2026 — Sectigo, a global leader in automated Certificate Lifecycle Management (CLM) and digital certificates, today announced the appointment of Prem Hareesh as Corporate Chief Technology Officer. 

Anthropic has announced its intentions to support SPIFFE/SPIRE with the SPIRE server rooted in an "upstream authority," which will require a root private CA rather than allowing self-attestation for agentic AI.

SCOTTSDALE, Ariz./India – July 20, 2026 – Sectigo, a global leader in automated Certificate Lifecycle Management (CLM) and digital certificates, today announced a strategic partnership with eCAPS Computers India to help organizations navigate the industry's rapid shift toward 47-day certificate lifecycles through advanced automation.

In our episode 640 we defined SPIFFE, which provides digital identity for agentic workloads. In this episode we explain SPIRE (SPIFFE Runtime Environment), the SPIFFE certificate provisioning protocol.

SPIFFE (Secure Production Identity Framework for Everyone) is a standard for digital identity for agentic workloads. In this episode we explain.

Static API keys are a common security practice. In this episode we discuss the risk of these keys being revealed, including directly by the AIs that use them.

Join this webinar to learn how modern private Certificate Authorities provide the foundation for authenticating agentic actors at scale, while giving you the visibility, control, and automation required for today’s infrastructure.

Tim shares his very personal experience with would-be catfishers and we talk about how AI is set to change the catfishing attack.

The Baseline Requirements, CT logs, the Bugzilla Bloodbath, shortening certificate lifespans, all these trends serve to enforce a high level of quality and predictability across WebPKI certificates.  Nearly twenty years after the introduction of EV SSL, we ask if it has served its purpose and should be retired.

Dustin Moody of NIST joins us to talk about the evolution of standardized cryptography beyond the current PQC efforts. Topics include maintaining visibility on cryptography presently in use, 50 years of RSA, and cryptographic heterogeny.