For many years, S/MIME email certificates remained in the shadow of TLS certificates. Although they played a critical role in ensuring the confidentiality and integrity of electronic communication, their development was relatively slow, and validation processes were often perceived as archaic, manual, and difficult to scale. In 2025, however, this situation began to change noticeably.
The development of quantum computers is no longer an academic curiosity. For public administration, the military, and organizations responsible for national security, it has become a concrete vector of strategic risk that forces a fundamental shift in the approach to cryptography. The latest actions of the Department of Defense (Department of War) confirm that the […]
The TLS and X.509 certificate infrastructure is entering a new era – the post-quantum era. NIST algorithms (ML-KEM and ML-DSA) and hybrid certificates are changing the way we generate keys, create CSR, and perform the TLS handshake. A previously simple CSR is now becoming a critical element: it must comply with the new CA/B Forum […]
Automating certificates has been for years a relatively stable and predictable part of the TLS ecosystem. ACME – the protocol originally introduced by Let’s Encrypt – has become the de facto standard for automated renewals and certificate issuance. Its architecture was built around a simple model: key generation, CSR creation, domain validation, certificate retrieval. In […]
For the past decade, the development of network cryptography has progressed in an evolutionary manner. We updated OpenSSL libraries, replaced SHA-1 with SHA-256, increased RSA key lengths, but all of this remained within a familiar security model. In 2025, for the first time in more than 20 years, we are facing a change that is […]
NIS2 is a directive that in many organizations has been perceived primarily as a procedural requirement: policies, registers, classifications, audits. Meanwhile, its real impact is much deeper – true compliance begins only at the level of cryptography. This is where the directive expects proof that the organization understands modern threats and can maintain technical security […]
In recent years, the way we generate CSR (Certificate Signing Request) has undergone a revolution. A few years ago, a CSR was one of the least problematic elements of the certificate issuance process – a simple text file in which you entered a domain, optionally the company details, generated a key, and that was it. […]
