Sectigo’s latest report identifies important pressures on cryptographic operations. Our review examines what its survey establishes and where its conclusions exceed the evidence.

The 47-day certificate era is coming - and your #discovery tools are about to break. ⏳🔒 Nearly all security and infrastructure teams know about Ballot SC-081v3 passed by the CA/Browser Forum: • March 15, 2026: Validity capped at 200 days • March 15, 2027: Ceiling drops to 100 days • March 15, 2029: Mandatory 47-day max lifespan We talk often about auto-renewals, but we aren't talking enough about discovery. If your discovery strategy relies on active network port scans run m

The Certificate Lifespan Collapse: Why PKI, KMS and PQC Must Become One Enterprise Architecture For decades, enterprise security treated digital certificates and cryptographic keys as static operational overhead. Organisations deployed Public Key Infrastructure (PKI) certificates with multi-year lifespans, stored symmetric keys in isolated Key Management Systems (KMS), and operated on the assumption that standard public-key algorithms (RSA, ECC) would remain mathematically se

It has become less tolerant of the past. This month, the IETF published RFC 9846, which replaces RFC 8446 while keeping the protocol as TLS 1.3. On the surface, it looks like a minor revision. It isn't. One change stands out: Implementations MUST NOT negotiate TLS 1.0 or TLS 1.1. Not "SHOULD NOT." Not "avoid where possible." MUST NOT. That matters because we're reaching a tipping point. For years, organisations carried obsolete cryptography because "it still works." Increasin