For a long time, discussions about the security of domains and web services have been reduced to a handful of buzzwords: SSL certificate, HSTS, HTTPS redirection, possibly preload analysis. In practice, however, anyone maintaining production environments knows that the real state of “trust” of a domain or service is much broader. It’s not just about […]
Modern websites operate in an environment where security does not end with an SSL certificate. The certificate provides encrypted transmission and communication integrity, which can be verified with tools such as SSL Checker and monitored over time using SSL Monitor. However, this is only one layer. Above it lies application logic, dynamically loaded scripts, external […]
The TLS and X.509 certificate infrastructure is entering a new era – the post-quantum era. NIST algorithms (ML-KEM and ML-DSA) and hybrid certificates are changing the way we generate keys, create CSR, and perform the TLS handshake. A previously simple CSR is now becoming a critical element: it must comply with the new CA/B Forum […]
For the past decade, the development of network cryptography has progressed in an evolutionary manner. We updated OpenSSL libraries, replaced SHA-1 with SHA-256, increased RSA key lengths, but all of this remained within a familiar security model. In 2025, for the first time in more than 20 years, we are facing a change that is […]
From us: With this article, we begin a new series of publications on our website: HEXSSL Insight. These will be extensive articles containing our expertise supported by numerous examples from our own experience. We hope that the information contained in these articles will help you better understand all aspects related to broadly defined online security. […]
With the end of October, celebrated worldwide as Cybersecurity Awareness Month, we summarize HEXSSL’s initiatives promoting cybersecurity and digital resilience. The year 2025 clearly demonstrates that online security is no longer the domain of IT departments alone – it has become a key element of every organization’s business strategy, regardless of size.
Digital trust has become today’s currency – determining conversion rates, customer acquisition costs, and the ability to perform financial transactions. Two key pillars of this trust are the Legal Entity Identifier (LEI) – a global identifier for legal entities – and SSL/TLS certificates, which ensure confidentiality and integrity of communication. Below we explain how to […]
In the era of increasing cyberattacks, ransomware, and phishing, individual security solutions are no longer enough. An SSL/TLS certificate is now the starting point – not the goal itself. To effectively protect a website, user data, and brand reputation, it is essential to build a cohesive online security ecosystem that includes encryption, trust verification, malware […]
Implementing an SSL/TLS certificate is now an absolute standard for every website, web application, or API interface. However, simply having a certificate does not guarantee security. In practice, many implementations leave gaps that not only lower the level of protection but also affect the domain’s reputation, SEO, and compliance with regulations (e.g. NIS2, GDPR).
The dynamic development of technology, the growing popularity of cloud services, and the increasing scale of cyberattacks make website security one of the top priorities in 2025. Attacks targeting the application layer (OWASP Top 10), phishing, ransomware, or misconfigurations have become everyday realities. Moreover, regulations such as NIS2 and DORA impose obligations on organizations to […]
