Where post-quantum TLS actually stands in 2026: hybrid key exchange (X25519MLKEM768) is shipping, PQ signatures are the open problem, and Merkle Tree Certificates are the emerging answer.
CA/Browser Forum ballot SC-081v3 cuts certificate validity to 47 days and domain-validation reuse to 10 days by 2029. The full schedule and what it does to your renewal and validation pipeline.
A check-by-check technical walkthrough of a TLS scan report - grade methodology, hostname/SAN, chain, protocols, ciphers, and vulnerabilities - each with the openssl command to reproduce it.
Subscribe via RSS.