In the world of cybersecurity, the most dangerous threats are no longer exploits alone, but flaws in the trust model. The Himalaya feature, introduced into the OpenClaw framework, is one of the first real examples of this shift. What appears in the documentation as an enhancement for email handling, in practice defines a new risk […]
For a long time, discussions about the security of domains and web services have been reduced to a handful of buzzwords: SSL certificate, HSTS, HTTPS redirection, possibly preload analysis. In practice, however, anyone maintaining production environments knows that the real state of “trust” of a domain or service is much broader. It’s not just about […]
From March 2026, the maximum validity of public SSL/TLS certificates is reduced to 200 days. This decision represents another stage in the evolution of the global WebPKI trust infrastructure and results from agreements developed within the CA/Browser Forum – the organization that defines standards for the operation of public certification authorities and internet browsers. At […]
On 10 February 2026 we observe Safer Internet Day (Safer Internet Day), an initiative that for years has reminded us that online security is not a one time action, but a process encompassing technology, procedures, and human decisions. In 2026 this message gains particular significance. Today the Internet is critical infrastructure for business, public administration, […]
Encryption over HTTPS solves many problems, but one element has remained a critical vulnerability point for years: the moment when the browser still does not yet know whether it should use HTTPS. This stage precedes the actual TLS connection. It happens before the handshake is performed, before the certificate is verified and before the server […]
In 2026, the TLS/SSL certificate industry is introducing another major change related to the maximum certificate validity period. DigiCert, as one of the largest certificate authorities, has confirmed that from February 24, 2026, all new public TLS certificates will have a maximum validity of 199 days.
The development of quantum computers is no longer an academic curiosity. For public administration, the military, and organizations responsible for national security, it has become a concrete vector of strategic risk that forces a fundamental shift in the approach to cryptography. The latest actions of the Department of Defense (Department of War) confirm that the […]
In 2025, Sectigo initiated one of the most significant infrastructure changes in its PKI ecosystem, namely the migration of certificate issuance to new, proprietary Public Root Certification Authorities. This change affects all major product lines, including SSL/TLS certificates (DV, OV, EV) and S/MIME, and has a direct impact on how trust chains are built in […]
E-mail has remained both one of the oldest and most exposed channels of business communication for years. The SMTP protocol was created in a time when the internet assumed trust between the sender and the recipient. Today the reality is different. Attackers use email messages to take over accounts, extort payments, steal data and manipulate […]
At the end of October 2025, Google announced one of the most significant changes to Chrome’s security policy in many years. Starting from version 154, which will be delivered to users in October 2026, the browser will enforce HTTPS connections by default. This means that Chrome will attempt to establish an encrypted connection to every […]
