Certificates
30 articles about Certificates
Eight eMudhra CA keys were compromised. Here is what it means for you
Eight eMudhra intermediate CA keys could be recovered from their public certificates. Here's who is affected, what we found, and what to do now.
Read moreCertificatesCloudflare certificate authority: what it means for you
Cloudflare is applying to become a certificate authority, with post-quantum certificates due in 2027. Here's what it means for teams managing TLS certificates.
Read morepost-quantumA closer look at the performance of ML-KEM
ML-KEM barely moves the CPU needle, but it adds real bytes to every TLS handshake. Here's what changes when hybrid key establishment goes live.
Read morepost-quantumEffect of post-quantum algorithms on networking performance
ML-KEM and ML-DSA don't cost much extra CPU, but they add real round trips. Here's how post-quantum handshakes change TLS latency, congestion windows, and middlebox behavior.
Read morepost-quantumPost-quantum key establishment, ten years later
Post-quantum key establishment is now standard in TLS 1.3, but only 11% of origin servers are protected. Here's where hybrid ML-KEM adoption really stands.
Read morepost-quantumWhy post-quantum signatures are breaking TLS handshake limits
Post-quantum signature sizes are up to 34x larger than ECDSA. Here's why ML-DSA certificate chains blow past the 14.5 KB TCP congestion window.
Read moreCertificatesLet's Encrypt webinar recap: Adapting to shorter certificate lifecycles and PKI changes
Certificate lifetimes are dropping to 47 days by March 2029. Get the scoop from leading certificate authority, Let's Encrypt, on what shorter TLS certificate lifespans mean for automation, inventory, plus, how Red Sift Certificates can help.
Read moreCertificatesPost-quantum cryptography starts with your PKI estate
Post-quantum cryptography migration faces a 2031 federal deadline and Google's own 2029 target. Here's why mapping your PKI estate has to start now.
Read moreCertificatesThe Certificate Transparency Visibility Gap
Certificate Transparency has a visibility gap most organizations miss. Learn how CAA and CT monitoring can close it before a bad actor does.
Read moreCertificatesDKIM and Post-Quantum Cryptography: Keep Calm and Fix the Basics
Post-quantum cryptography is a real issue, but not every part of the email security stack is exposed in the same way. A lot of commentary collapses the whole topic into “store now, decrypt later”: ...
Read moreCertificatesCA/Browser Forum: ACME CAA Extensions (RFC 8657) To Become Mandatory
The CA/Browser Forum has spoken: ACME CAA extensions will be mandatory from March 2027 onward.
Read moreCertificatesHigh-Assurance Certificate Transparency Monitoring with Red Sift Certificates
Learn how to detect unauthorized certificate issuances with Certificate Transparency monitoring. Set up CAA policies, CT monitoring rules, and high-assurance escalation in Red Sift Certificates.
Read moreCertificatesShould you use public PKIs for your private infrastructure?
Public PKIs are cost-effective for internal use, but come with trade-offs like certificate transparency, rate limits, and shrinking lifetimes. Here's how to decide between public and private PKI.
Read moreCertificatesHow many public PKIs are there?
Public Key Infrastructures go far beyond Web PKI. Explore the full landscape of public PKIs — from code signing and S/MIME to BIMI and Matter — and learn which one fits your needs.
Read moreCertificatesPKI ecosystem changes in 2026: what your team needs to know
2026 brings shorter certificate lifetimes, unmanaged private PKI, and looming post-quantum migration. A concise guide to the changes security teams need to plan for.
Read moreCertificatesHow expired certificates can cause service downtime and financial losses
Certificate expiry outages cost enterprises up to $5 million per incident and take hours to resolve. This post covers the financial impact and how to prevent them.
Read moreCertificatesCryptographic discovery requires deep infrastructure expertise and big data
Ivan Ristic explains how building a cryptographic discovery platform requires combining deep network infrastructure knowledge with large-scale monitoring of domains, DNS, and certificates.
Read moreCertificatesCertificate Lifecycle Management needs a dedicated monitoring platform
CLM tools manage issuance and renewal, but dedicated monitoring platforms provide the real-time discovery and Certificate Transparency visibility that enterprises actually need.
Read moreCertificatesCertificate Transparency should be the key aspect of your cryptographic discovery strategy
Certificate Transparency logs provide real-time visibility into every certificate issued for your domains. This post explains why CT should anchor your cryptographic discovery strategy.
Read moreCertificatesTowards monthly certificate renewal
Certificate lifetimes are shrinking to 47 days by 2029. This post explains why shorter lifetimes improve security and why automation is now essential for renewal.
Read more