Apple’s recent proposal to slash public TLS certificate lifespans from 398 days to 45 days had sparked intense discussions in the PKI community. Introduced in a recent CA/Browser (CA/B) Forum meeting, the draft ballot presented by Apple proposed a gradual reduction of the maximum validity for public SSL/TLS certificates from 398 days to 45 days ..read more

NIST recently released an Initial Public Draft (IPD) report on transitioning from traditional public-key cryptographic algorithms to standardized post-quantum cryptography (PQC). This report details NIST’s roadmap for the PQC adoption, including timelines for deprecating and disallowing a broad set of currently-used algorithms and key considerations for migration. The report aims to guide federal agencies, technology ..read more

If there’s one thing Microsoft, Spotify, Google Voice, and the Bank of England have in common, what would it be? All of them have recently been rocked by a major outage caused by an expired TLS certificate that significantly disrupted their operations and essential public services. The ripple effect of these outages reached far beyond ..read more

NIST sets key deadlines for retiring legacy encryption algorithms, with widely-used methods like RSA, ECDSA, EdDSA, DH, and ECDH set for deprecation by 2030 and full phase-out by 2035. Last week, NIST released an Initial Public Draft (IPD) report outlining its recommended roadmap for transitioning from traditional public-key cryptographic algorithms to standardized post-quantum cryptography (PQC ..read more

As the year winds down, it’s the perfect time to pause for retrospection. 2024 has been both exciting and challenging for the PKI and CLM space, pushing the industry to rethink strategies and adapt. From the explosive growth of non-human and machine identities to the proposed move toward shorter-lived certificates and the accelerating countdown to ..read more

Private PKI (Public Key Infrastructure) is critical for trusted authentication and secure communication among internal applications, devices, workloads, machines, and services. While most organizations understand its importance, managing it effectively is still a struggle for many. Traditionally, organizations manage private PKI on-premises for greater control, security, and customization. However, as new use cases emerge and ..read more

We’re just days away from November 12, 2024—the date when Google Chrome will begin distrusting newly issued certificates from Entrust Roots. Shortly after, Mozilla will implement its distrust in Entrust Roots by the end of November. If your organization hasn’t yet switched to a reliable public Certificate Authority (CA), it’s time to do so. This ..read more

In today’s complex IT environments, securing user and machine identities and enabling seamless authentication are critical, especially for organizations that manage hybrid, multi-cloud infrastructures. Citrix Federated Authentication Service (FAS) has become an essential component in securing user access to Virtual Desktop Infrastructure (VDI) and Virtual Delivery Agents (VDAs) by dynamically issuing certificates that enable users ..read more

At the last CA/Browser (CA/B) Forum meeting, Apple dropped a big announcement, causing quite a stir in the PKI industry. Apple introduced a draft ballot, proposing a gradual reduction of the maximum validity for public SSL/TLS certificates from 398 days to just 45 days by 2027. The proposal also includes cutting the Domain Control Validation ..read more

Until recently, the phrase ’90 days’ was commonly associated with productivity and quarterly plans. However, this changed on March 3rd, 2023, when Google announced a proposed policy change that is likely to disrupt the cybersecurity space. A case in point where simple policy changes can have a major impact at scale. In a move to ..read more