In the world of cybersecurity, the most dangerous threats are no longer exploits alone, but flaws in the trust model. The Himalaya feature, introduced into the OpenClaw framework, is one of the first real examples of this shift. What appears in the documentation as an enhancement for email handling, in practice defines a new risk […]
April 15, 2026 is an important date for organizations that still rely on parts of the older DigiCert hierarchies. On that day, Mozilla and Google Chrome will remove DigiCert G1 roots from their trust stores, which means that TLS certificates chaining exclusively to those roots will no longer be trusted in environments based on those […]
Information about the approval of Apple devices for processing data classified at the NATO Restricted level has naturally attracted market attention. This announcement can easily be interpreted as a breakthrough involving the “opening” of high security environments to consumer devices. In reality, the significance of this decision is more complex and primarily concerns trust architecture […]
On 10 February 2026 we observe Safer Internet Day (Safer Internet Day), an initiative that for years has reminded us that online security is not a one time action, but a process encompassing technology, procedures, and human decisions. In 2026 this message gains particular significance. Today the Internet is critical infrastructure for business, public administration, […]
For many years, S/MIME email certificates remained in the shadow of TLS certificates. Although they played a critical role in ensuring the confidentiality and integrity of electronic communication, their development was relatively slow, and validation processes were often perceived as archaic, manual, and difficult to scale. In 2025, however, this situation began to change noticeably.
The year 2026 marks a fundamental turning point in the evolution of cybersecurity and digital trust. Drawing on forecasts prepared by DigiCert, we can see how traditional priorities in system and data protection are giving way to far deeper, structural challenges and opportunities. The next twelve months will be a period in which organizations will […]
In the face of dynamic digital transformation, where the Zero Trust model is becoming the new standard and machine identity (workload identity) is just as critical as user identity, a reliable Public Key Infrastructure (PKI) forms the absolute foundation of security. For large enterprises, the choice of the right PKI architecture between the traditional Enterprise […]
In October 2025, the CA/Browser Forum approved a change aimed at limiting the maximum validity period of publicly trusted Code Signing certificates from the current 39 months to 460 days (approximately 15 months). This change will take effect on March 1, 2026 and has critical implications for software supply chain security (Software Supply Chain Security).
For years, Client Authentication (mTLS) has been implemented using public SSL/TLS certificates issued by publicly trusted certification authorities. This model worked because server certificates could include both Server Authentication and Client Authentication (EKU), and browsers and operating systems accepted such a dual-use scenario.
In 2026, the TLS/SSL certificate industry is introducing another major change related to the maximum certificate validity period. DigiCert, as one of the largest certificate authorities, has confirmed that from February 24, 2026, all new public TLS certificates will have a maximum validity of 199 days.
