View all articles
304 articles
Post-quantum key establishment, ten years later
Post-quantum key establishment is now standard in TLS 1.3, but only 11% of origin servers are protected. Here's where hybrid ML-KEM adoption really stands.
Read moreDNSHow open zone transfers expose your internal network
An open DNS zone transfer hands attackers a map of your network in one query. Here's what it reveals, and how Red Sift ASM keeps your organization safe.
Read morepost-quantumWhy post-quantum signatures are breaking TLS handshake limits
Post-quantum signature sizes are up to 34x larger than ECDSA. Here's why ML-DSA certificate chains blow past the 14.5 KB TCP congestion window.
Read moreCertificatesHow to adapt to shorter certificate lifecycles and PKI changes
Certificate lifetimes are dropping to 47 days by March, 2029. See what shorter TLS certificate lifespans mean for automation, inventory, and Red Sift Certificates.
Read moreAI & SecurityIntroducing Radar Lite's new Claude and ChatGPT integrations
Red Sift Radar Lite now integrates natively with Claude and ChatGPT, so your team can run email, DNS, and web security checks inside the tools it already uses.
Read moreDMARCDMARC in Ireland: where the biggest companies stand
Red Sift checked DMARC across 200 of Ireland's biggest companies. Multinationals sit at 63% enforcement and Irish-founded firms at 39.6%. See the full data.
Read moreProduct UpdatesRed Sift's Quarterly Product Release: Summer 2026
Summer's here, and so is a batch of updates from our product and engineering teams.
Read moreEmail SecurityDangling DNS: how to find and fix it before takeover
Dangling DNS is easy to create and hard to spot. OWASP and AWS both flag it. Here's the risk, what each says, and how to find and fix it across your estate.
Read moreDMARCDMARC in Germany: where the top 250 companies stand
Only 44.8% of Germany's top 250 companies enforce DMARC at p=reject, and 32% have no real email protection. See the gaps, the NIS2 angle, and the fixes.
Read moreCertificatesPost-quantum cryptography starts with your PKI estate
Post-quantum cryptography migration faces a 2031 federal deadline and Google's own 2029 target. Here's why mapping your PKI estate has to start now.
Read moreCertificatesThe Certificate Transparency Visibility Gap
Certificate Transparency has a visibility gap most organizations miss. Learn how CAA and CT monitoring can close it before a bad actor does.
Read moreRed Sift and GlobalSign Announce 2026 BIMI Partnership
Red Sift OnDMARC is now available through GMO GlobalSign, giving customers a single path from DMARC enforcement to BIMI and a Verified Mark Certificate (VMC).
Read moreCompany NewsRed Sift featured in History of Parliament centenary book launch at Westminster Abbey
Red Sift joins “Monarchy and Democracy: A History of Leadership,” an official History of Parliament book launching at Westminster Abbey 9 June 2026.
Read moreDMARC61% of Southeast U.S. organizations are unprotected against phishing attacks
Red Sift analyzed 600 Southeast US domains and found only 39% have full DMARC enforcement. See the state-by-state breakdown and how to close the gap.
Read moreDMARC69% of Northwest U.S. businesses vulnerable to email phishing
Red Sift analyzed 600 Northwest domains and found only 31% have full DMARC enforcement, the lowest of any U.S. region. See the breakdown and how to fix it.
Read moreCompany NewsOnDMARC climbs to #1 in the Mid-Market Grid in G2's Summer 2026 Report
Red Sift OnDMARC ranked #1 in three Mid-Market indexes and earned 10 badges in G2's Summer 2026 Report.
Read moreCertificatesDKIM and Post-Quantum Cryptography: Keep Calm and Fix the Basics
Post-quantum cryptography is a real issue, but not every part of the email security stack is exposed in the same way. A lot of commentary collapses the whole topic into “store now, decrypt later”: ...
Read moreDMARCDMARCbis is now an IETF Proposed Standard: What that means today
Going forward, DMARCbis is the new DMARC with added clarity.
Read moreCertificatesCA/Browser Forum: ACME CAA Extensions (RFC 8657) To Become Mandatory
The CA/Browser Forum has spoken: ACME CAA extensions will be mandatory from March 2027 onward.
Read moreEmail AuthenticationBuilding an email and brand defense that works: Webinar recap
DMARC is a good start, but it’s not the finish line. Learn more about the multifaceted nature of cyber attacks and what you can do to protect your brand in this webinar recap.
Read more