A gardener knows the calendar. Spring is for planting. Summer is for watering and deadheading. Autumn is for pruning and clearing leaves. Winter is for the long, slow jobs - mulching, planning, orderi
A jewelry store with a window display has a particular kind of security problem. The display has to look good - that's the point. It has to be visible from the street. It has to invite people in. It a
GoDaddy is revoking 404,607 TLS certificates because the policy lines inside them don't match its own published rulebook, and it has missed the five-day deadline. What went wrong, which certificates are affected, and what to do before yours is revoked.
If your certificate's start date is more than 48 hours before it was actually issued, industry rules call that backdated, and your CA has 5 days to revoke it once it finds out. Nothing is wrong on your end. Here's what backdating means, a real 2026 example, and what TLS Radar checks for it.
When you travel internationally, the careful traveller keeps a folder. Not metaphorically - a literal folder, or a phone wallet, or a screenshot album. In it: a copy of the passport, the visa, hotel c
SOC 2, PCI, ISO, HIPAA - the controls converge on the same set of questions about cert inventory, lifecycle, and alerting. What continuous evidence collection looks like.
At school, the best maths teachers had a rule: "show your work." Getting the right answer wasn't enough. You had to show - step by step, line by line - how you got there. The point wasn't to be pedant
An annual WebTrust audit found four sampled certificates with no evidence that multi-perspective domain validation was performed. The full investigation found 2,700, and SSL.com revoked them all within a day. What MPIC is, why you could not have seen this one coming, the second SSL.com incident you can check for yourself, and what TLS Radar's new revocation checking does about it.
When you write something on a postcard, anyone who handles it can read it. The postman. The sorter. The person who picks it out of the mailbox. The neighbour who happened to be in the lobby. The postc
In the two weeks ending August 27, 2026, more than 30 public CAs logged 69 compliance incidents in Mozilla's tracker - delayed revocations, country-field and clientAuth misissuance, and the process failures that precede distrust. Every incident sourced to its Bugzilla bug, grouped by what it means for the certificates your business depends on.
One CA revoked 1.7 million certificates in 24 hours on April 3, 2026, following a compliance-driven mandatory revocation event. Five categories of mass revocation triggers, the timeline between revocation and customer impact, and why internal monitoring misses all of them.
A mid-sized public CA's internal compliance documentation fell out of sync with its issuance system, forcing two separate mass revocations in July 2026. What happened, why it isn't a HARICA-specific problem, and how to check whether you're exposed to the next one.
A SOC 2 audit is not like going to the dentist. The dentist has a known procedure. They clean your teeth, count them, look for cavities, and send you home with a small toothbrush. The visit fits in a
Think of PCI-DSS as the health inspection your restaurant takes every year, except the restaurant is your business and the food is your customers' credit card data. The inspector has a checklist. You
Subscribe via RSS.