In the world of cybersecurity, the most dangerous threats are no longer exploits alone, but flaws in the trust model. The Himalaya feature, introduced into the OpenClaw framework, is one of the first real examples of this shift. What appears in the documentation as an enhancement for email handling, in practice defines a new risk […]
April 15, 2026 is an important date for organizations that still rely on parts of the older DigiCert hierarchies. On that day, Mozilla and Google Chrome will remove DigiCert G1 roots from their trust stores, which means that TLS certificates chaining exclusively to those roots will no longer be trusted in environments based on those […]
From March 2026, the maximum validity of public SSL/TLS certificates is reduced to 200 days. This decision represents another stage in the evolution of the global WebPKI trust infrastructure and results from agreements developed within the CA/Browser Forum – the organization that defines standards for the operation of public certification authorities and internet browsers. At […]
With the growing scale and complexity of attacks on Internet infrastructure, traditional domain validation models have stopped meeting the requirements of modern public PKI. In response to real threats such as selective DNS spoofing and regional BGP hijacking, global certificate authorities, including DigiCert and Sectigo, implemented the mandatory Multi-Perspective Issuance Corroboration (MPIC) mechanism in 2025.
In the face of dynamic digital transformation, where the Zero Trust model is becoming the new standard and machine identity (workload identity) is just as critical as user identity, a reliable Public Key Infrastructure (PKI) forms the absolute foundation of security. For large enterprises, the choice of the right PKI architecture between the traditional Enterprise […]
In October 2025, the CA/Browser Forum approved a change aimed at limiting the maximum validity period of publicly trusted Code Signing certificates from the current 39 months to 460 days (approximately 15 months). This change will take effect on March 1, 2026 and has critical implications for software supply chain security (Software Supply Chain Security).
For years, Client Authentication (mTLS) has been implemented using public SSL/TLS certificates issued by publicly trusted certification authorities. This model worked because server certificates could include both Server Authentication and Client Authentication (EKU), and browsers and operating systems accepted such a dual-use scenario.
In 2026, the TLS/SSL certificate industry is introducing another major change related to the maximum certificate validity period. DigiCert, as one of the largest certificate authorities, has confirmed that from February 24, 2026, all new public TLS certificates will have a maximum validity of 199 days.
The development of quantum computers is no longer an academic curiosity. For public administration, the military, and organizations responsible for national security, it has become a concrete vector of strategic risk that forces a fundamental shift in the approach to cryptography. The latest actions of the Department of Defense (Department of War) confirm that the […]
In 2025, Sectigo initiated one of the most significant infrastructure changes in its PKI ecosystem, namely the migration of certificate issuance to new, proprietary Public Root Certification Authorities. This change affects all major product lines, including SSL/TLS certificates (DV, OV, EV) and S/MIME, and has a direct impact on how trust chains are built in […]
