Resource Library

Anthropic recently announced that Mythos has found mathematical weakness in the core algorithm for the third-round NIST PQC candidate HAWK, effectively halving its effective key strength. Mythos also developed a faster attack on a round-reduced version of AES-128. These are not implementation attacks but mathematical attacks on the core cryptography. We discuss the massive implications of these developments.

Many small and midsize businesses think outages only happen when a server crashes or a website stops loading. In reality, your site can be online and still feel unavailable to customers. This is what happens when an SSL/TLS certificate expires...

Join Sectigo for a practical look at what real certificate visibility looks like: how automated discovery works across mixed environments and issuing CAs, why it's the prerequisite for crypto agility and PQC readiness, and how teams are replacing manual tracking with continuous, centralized inventory.

Because of a change in the drop-dead date, we have observed confusion about the timeline for deprecation of client authentication and mTLS for public TLS certificates. This is an inflexible deadline, and enterprises that are not ready risk outage. In this episode we spell out these dates very clearly.

World Wide Web Day on August 1 is a reminder that the secure, reliable Web depends on technologies most people never see. Every HTTPS connection, authenticated software download, and...

Observed on August 1, World Wide Web Day recognizes how deeply the web has transformed the way people communicate, work, shop, and access information. This day encourages us to reflect on just how far...

In our series on digital identity for AI agents, we discuss FAPI 2.0 as an option.

In our ongoing series on digital identity for agents, we have previous discussed use of certificates for authentication. In this episode we describe how cryptographic proof of possession can enable secure authentication using tokens.

MTCs reduce PQC overhead using compact proofs, enabling fast, transparent, and scalable post-quantum certificate authentication.

We survey different strategies for securely authenticating agentic AI, including certificates and SPIFFE. We discuss Zero Trust and the Principle of Least Privileges as applied to agents.

SCOTTSDALE, Ariz. — July 22, 2026 — Sectigo, a global leader in automated Certificate Lifecycle Management (CLM) and digital certificates, today announced the appointment of Prem Hareesh as Corporate Chief Technology Officer. 

Anthropic has announced its intentions to support SPIFFE/SPIRE with the SPIRE server rooted in an "upstream authority," which will require a root private CA rather than allowing self-attestation for agentic AI.

SCOTTSDALE, Ariz./India – July 20, 2026 – Sectigo, a global leader in automated Certificate Lifecycle Management (CLM) and digital certificates, today announced a strategic partnership with eCAPS Computers India to help organizations navigate the industry's rapid shift toward 47-day certificate lifecycles through advanced automation.

In our episode 640 we defined SPIFFE, which provides digital identity for agentic workloads. In this episode we explain SPIRE (SPIFFE Runtime Environment), the SPIFFE certificate provisioning protocol.

SPIFFE (Secure Production Identity Framework for Everyone) is a standard for digital identity for agentic workloads. In this episode we explain.