An essay on CAs revoking Windows code-signing certs for malware, and why PKI was never meant to be a software cop.
trending7
01 02 Entrust’s take on the new U.S. PQC order, mostly a checklist for agencies, contractors, and anyone pretending migration can wait.03 Formalizes dead-man-switch crypto in UC, with constructions for post-mortem release or provable destruction of a lone secret.04 Deep dive on Windows revocation providers and trust validation, for when CRL/OCSP's good enough is apparently not.05 Certificates are getting shorter, because humans are the weak link; this talk covers ACME and crypto agility.06 G7 Cybersecurity Working Group Statement on preparing for a post-quantum cryptography migration cyber.gc.caG7 tells big orgs to inventory, prioritize, test, document, and bully vendors before the quantum paperweights arrive.07 A theory essay on ETH as shared namespace, with the new bit being state PKI credentials meeting Ethereum proofs.