Debate around EV SSL certificates (Extended Validation) has been ongoing for years, yet few people truly understand what EV is, what it does and what role it plays in the security ecosystem. For years, EV certificates were associated mainly with the green bar in the browser. When browsers stopped highlighting this element, many assumed that […]
In recent years, TLS has undergone one of the most significant changes since the introduction of SNI. The removal of RSA from key exchange in TLS 1.3, the transition to a fully elliptic ECDHE exchange, and the increasing share of mobile traffic have made cryptographic performance an architectural element rather than a marginal detail. In […]
In the last two years one of the biggest shifts in the history of network security has taken place. The landscape of the internet has stopped being a collection of simple websites connected by links. Today it is a complex structure of dependencies: SaaS applications, API interfaces, microservice architectures, payment systems, B2B integrations, e-commerce platforms, […]
The TLS and X.509 certificate infrastructure is entering a new era – the post-quantum era. NIST algorithms (ML-KEM and ML-DSA) and hybrid certificates are changing the way we generate keys, create CSR, and perform the TLS handshake. A previously simple CSR is now becoming a critical element: it must comply with the new CA/B Forum […]
At the end of October 2025, Google announced one of the most significant changes to Chrome’s security policy in many years. Starting from version 154, which will be delivered to users in October 2026, the browser will enforce HTTPS connections by default. This means that Chrome will attempt to establish an encrypted connection to every […]
For the past decade, the development of network cryptography has progressed in an evolutionary manner. We updated OpenSSL libraries, replaced SHA-1 with SHA-256, increased RSA key lengths, but all of this remained within a familiar security model. In 2025, for the first time in more than 20 years, we are facing a change that is […]
NIS2 is a directive that in many organizations has been perceived primarily as a procedural requirement: policies, registers, classifications, audits. Meanwhile, its real impact is much deeper – true compliance begins only at the level of cryptography. This is where the directive expects proof that the organization understands modern threats and can maintain technical security […]
In recent years, the way we generate CSR (Certificate Signing Request) has undergone a revolution. A few years ago, a CSR was one of the least problematic elements of the certificate issuance process – a simple text file in which you entered a domain, optionally the company details, generated a key, and that was it. […]
Websites today operate using one universal currency: trust. This is not a metaphor or a marketing slogan. It is cold economics, where every second of user attention costs money, and decisions are made faster than we can consciously analyze a situation. Online business owners have been hearing for years that they must have SSL, otherwise […]
Implementing an SSL/TLS certificate is now an absolute standard for every website, web application, or API interface. However, simply having a certificate does not guarantee security. In practice, many implementations leave gaps that not only lower the level of protection but also affect the domain’s reputation, SEO, and compliance with regulations (e.g. NIS2, GDPR).
