-
Webinar Upcoming
2025 cryptography trends: Challenges & opportunities for IT teams
Prepare for 2025 PKI challenges: Quantum threats, TLS changes, and automation trends to boost crypto-agility and overcome IT resource limits.
-
News Article Dec 18, 2024
In a dramatic shift that will reshape digital security practices, the tech industry stands at the cusp of a fundamental change in how we manage public SSL/TLS certificates. Apple’s recent proposal to reduce certificate lifecycles to just 47 days by 2028 reflects a growing trend, supported by other leading browsers like Google, advocating for shorter public certificate lifespans to improve security. Additionally, the proposal includes a corresponding decrease in the Domain Control Validation (DCV) reuse period, which stands to drop to just 10 days by 2028.
-
Podcast Dec 18, 2024
Root Causes 449: What Is a Quantum-safe HSM?
Repeat guest Bruno Coulliard of Crypto4A joins us to define a quantum-safe (or PQC enabled) hardware security module (HSM).
-
Press Release Dec 18, 2024
SCOTTSDALE, Ariz., – December 18, 2024 – Sectigo, a global leader in digital certificates and automated Certificate Lifecycle Management (CLM), today announced it is closing 2024 being recognized for top product leadership in Certificate Lifecycle Management and SSL/TLS Certificates, while fostering a positive, thriving work environment along the way. Sectigo earned top honors in the G2 Winter 2025 Grid Reports, and Comparably’s Best Places to Work Awards, earning recognition for Best Company Culture.
-
News Article Dec 17, 2024
A newly uncovered flaw in Microsoft’s Active Directory Certificate Services (AD CS), CVE-2024-49019, exposes enterprise domains to significant risk. By exploiting misconfigured certificate templates, attackers can escalate privileges to Domain Administrator, gaining unrestricted control over an organization’s network.
-
Podcast Dec 17, 2024
Root Causes 448: The Privilege of Being a Public CA
We go over Tim's September 2024 keynote speech at ENISA CA Day, "The Privilege of Being a Public CA."
-
Podcast Dec 13, 2024
Root Causes 447: NIST Deprecates RSA-2048 and ECC 256
As part of its post-quantum cryptography (PQC) initiative NIST has released a draft deprecating RSA-2048 and ECC 256 by 2030 and disallowing them by 2035. We get into the details.
-
Podcast Dec 12, 2024
Root Causes 446: Sectigo Assumes Five CABF Offices
Tim has stepped into the position of vice-chair of the CA/Browse Forum, and Sectigo now holds five chair or vice-chair positions in that body. We explain how leadership is chosen, the offices Sectigo holds today, and some of our vision for CABF in the next two years.
-
Blog Post Dec 10, 2024
Private CAs provide tailored security, automating internal certificate management and addressing AD CS limitations for secure, scalable digital operations.
-
Whitepaper Dec 09, 2024
Explore 2024 PKI trends: TLS validity shifts, quantum-safe cryptography, ROI insights, outages, and award-winning CLM.
-
Podcast Dec 09, 2024
Root Causes 445: Seven Reasons to Shorten Certificate Lifespans
We take a deep dive into the seven reasons shorter certificate lifespans are better.
-
Podcast Dec 05, 2024
Root Causes 444: What Happens to the WebPKI if Google Sells Chrome?
We discuss how a potential break of Chrome from Google would affect the WebPKI. We look at product changes, resourcing, post-quantum cryptography (PQC), innovation, moonshot initiatives, and other public CAs.