Google Warns ccTLD Hijacks Enabled Unauthorized HTTPS Certificates

Recent hijacks of .gh, .sl, and .as registry infrastructure let attackers alter DNS records and obtain unauthorized HTTPS certificates, Google said.

Cloudflare Plans a Public Certificate Authority as TLS Automation Pressure Rises

Cloudflare says it is applying to become a public certificate authority, a move that would put one of the largest TLS terminators on the internet into the certificate-issuance […]

Cloudflare Filters Certificate Alerts as Shorter TLS Lifetimes Raise the Noise Floor

Cloudflare has made its Certificate Transparency Monitoring generally available, with a practical change for hosting teams: alerts should now exclude the certificates Cloudflare itself issues for a customer’s […]

Vercel Adds Encrypted Client Hello to Its CDN as Hostname Privacy Moves Up the Stack

Vercel has added Encrypted Client Hello support to Vercel CDN, a small changelog item with a practical privacy angle for hosted sites. The company says ECH is now […]