#certificateauthority — Public Fediverse posts

NTLM relay attacks are back from the dead https://www.helpnetsecurity.com/2025/07/04/ntlm-relay-attacks/ #certificateauthority #Expertanalysis #authentication #cybersecurity #Expertcorner #SpecterOps #Don'tmiss #Microsoft #Hotstuff #attacks #opinion #servers #News

Let's #Encrypt rolls out free IP address #certificates • The Register

Let's Encrypt, a #CertificateAuthority (CA) known for its free TLS/SSL certificates, has begun issuing digital certificates for IP addresses.

It's not the first CA to do so. #PositiveSSL , #Sectigo, and #GeoTrust all offer TLS/SSL certificates for use with IP addresses, at prices ranging from $40 to $90 or so annually. But Let's Encrypt does so at no cost.
#security #tls #ssl #privacy

https://www.theregister.com/2025/07/03/lets_encrypt_rolls_out_free/

Let's #Encrypt rolls out free IP address #certificates • The Register

Let's Encrypt, a #CertificateAuthority (CA) known for its free TLS/SSL certificates, has begun issuing digital certificates for IP addresses.

It's not the first CA to do so. #PositiveSSL , #Sectigo, and #GeoTrust all offer TLS/SSL certificates for use with IP addresses, at prices ranging from $40 to $90 or so annually. But Let's Encrypt does so at no cost.
#security #tls #ssl #privacy

https://www.theregister.com/2025/07/03/lets_encrypt_rolls_out_free/

Let's #Encrypt rolls out free IP address #certificates • The Register

Let's Encrypt, a #CertificateAuthority (CA) known for its free TLS/SSL certificates, has begun issuing digital certificates for IP addresses.

It's not the first CA to do so. #PositiveSSL , #Sectigo, and #GeoTrust all offer TLS/SSL certificates for use with IP addresses, at prices ranging from $40 to $90 or so annually. But Let's Encrypt does so at no cost.
#security #tls #ssl #privacy

https://www.theregister.com/2025/07/03/lets_encrypt_rolls_out_free/

Let's #Encrypt rolls out free IP address #certificates • The Register

Let's Encrypt, a #CertificateAuthority (CA) known for its free TLS/SSL certificates, has begun issuing digital certificates for IP addresses.

It's not the first CA to do so. #PositiveSSL , #Sectigo, and #GeoTrust all offer TLS/SSL certificates for use with IP addresses, at prices ranging from $40 to $90 or so annually. But Let's Encrypt does so at no cost.
#security #tls #ssl #privacy

https://www.theregister.com/2025/07/03/lets_encrypt_rolls_out_free/

Let's #Encrypt rolls out free IP address #certificates • The Register

Let's Encrypt, a #CertificateAuthority (CA) known for its free TLS/SSL certificates, has begun issuing digital certificates for IP addresses.

It's not the first CA to do so. #PositiveSSL , #Sectigo, and #GeoTrust all offer TLS/SSL certificates for use with IP addresses, at prices ranging from $40 to $90 or so annually. But Let's Encrypt does so at no cost.
#security #tls #ssl #privacy

https://www.theregister.com/2025/07/03/lets_encrypt_rolls_out_free/

The Importance of Code Signing Best Practices in the Software Development Lifecycle – Source: securityboulevard.com https://ciso2ciso.com/the-importance-of-code-signing-best-practices-in-the-software-development-lifecycle-source-securityboulevard-com/ #HardwareSecurityModules(HSMs) #CertificateAuthority(CA) #rssfeedpostgeneratorecho #SecurityBloggersNetwork #CertificateManagement #CyberSecurityNews #SecureCodeSigning #SecurityBoulevard #codesigning #CA/BForum #ISO27001 #NIST #SOC2

Shorter TLS certificate lifespans expected to complicate management efforts https://www.helpnetsecurity.com/2024/08/09/certificate-lifespans/ #certificateauthority #quantumcomputing #cybersecurity #certificates #report #Venafi #News

DigiCert Revokes Thousands of SSL Certificates Over Validation Error https://thecyberexpress.com/digicert-ssl-certificates-validation-error/ #CertificateAuthority #TheCyberExpressNews #CybersecurityNews #DomainValidation #CA/BrowserForum #SSLCertificates #TheCyberExpress #Websitesecurity #CyberSecurity? #OnlineSecurity #TechnicalError #FirewallDaily #DataSecurity #DigiCert

New #blog posted! Check out how you can run your own private #StepCA #CertificateAuthority with #ACME and #Certbot totally private, disconnected from the internet. Run your own #LetsEncrypt at home!
#HomeLab #Security
https://mteixeira.wordpress.com/2024/03/03/running-your-private-certificate-authority-with-acme-support/

And, after some hard work, and a few struggles with #Docker, #DNS and #Firewall rules, I finally have been able to install #StepCA from #SmallStep on my #HomeLab, so now I have a nice private #CertificateAuthority with which I can use #Certbot to manage my service certificates in a #LetsEncrypt style. Took a lot of notes. Blog post will come eventually! (too tired right now)
https://smallstep.com/docs/step-ca/

PGPainless meets the Web-of-Trust

We are very proud to announce the release of PGPainless-WOT, an implementation of the OpenPGP Web of Trust specification using PGPainless.

Big thanks to Heiko for his valuable contributions and the great boost in motivation working together gave me 🙂
Also big thanks to NLnet for sponsoring this project in such a flexible way.
Lastly, thanks to Wiktor for his talent to connect people 😀

https://blog.jabberhead.tk/2023/07/25/pgpainless-meets-the-web-of-trust/

#certificateauthority #gpg #openpgp #pgp #pgpainless #pgpki #sequoia #weboftrust #wot

Of course, now that I’ve laboriously set up my #homelab #StepCA #CertificateAuthority, I am finding that #Pfsense and the #TrueNASScale #TrueCharts apps for #Traefik and #CertManager don’t integrate easily via #ACME custom servers or otherwise. 🤦‍♂️

Happy that I’ve successfully set up my own local #homelab #x509 and #SSH #CertificateAuthority with #StepCA. I imported a root #CA chain that I generated on my own separately.

From this, I learned that StepCA did not like the human-readable headings — above the “BEGIN CERTIFICATE” statements — in .crt/.pem files that #OpenSSL generated. I don’t know they are called or any CLI option that added them to the #PEM files. However, when I removed the headers, the StepCA server started without error.

Over what fields is the X509 hash computed over? [duplicate]

https://security.stackexchange.com/questions/268498/over-what-fields-is-the-x509-hash-computed-over

#publickeyinfrastructure #certificateauthority #digitalsignature #certificates #tls

Does defining "a minimum path length" for certification validation have any security benefit?

https://security.stackexchange.com/questions/268097/does-defining-a-minimum-path-length-for-certification-validation-have-any-secu

#publickeyinfrastructure #certificateauthority #commoncriteria #certificates

Can an Intermediate CA extend its "Certificate Key Usage" by issuing a new certificate for itself?

https://security.stackexchange.com/questions/268093/can-an-intermediate-ca-extend-its-certificate-key-usage-by-issuing-a-new-certi

#publickeyinfrastructure #certificateauthority #certificates

Det här med Internets rotcertifikat är inte alltid helt lätt att sätta sig in i, ändå spelar de en viktig roll för säkerhet på Internet ... 🧐 🤔 🔐

https://www.washingtonpost.com/technology/2022/11/08/trustcor-internet-addresses-government-connections

#cybersec #cybersecurity #rootcertificate #encryption #ssl #tls #certificateauthority #ca #itsakerhet #trustcor

#ActuLibre Let's Encrypt Revoking 3 Million TLS Certificates Issued Incorrectly Due to a Bug -> http://feedproxy.google.com/~r/TheHackersNews/~3/RChl-RdG7pU/lets-encrypt-certificate-revocation.html #FreeSSLTLSCertificate #CertificateAuthority #websitesecurity #serversecurity #SSLCertificate #cybersecurity #LetsEncrypt #TSLServer

@sungo I got myself verified in-person by several #CAcert members over a decade ago at a computer event in #Utrecht (#HCCDagen), but due to lacking browser support I have rarely used it since.
Nowadays I just use #LetsEncrypt instead.

I guess not forcefully redirecting to #httpS on their own site is a conscious choice, as their #CertificateAuthority still does not seem widely adopted by browser vendors

https://mastodon.social/media/DcoGRJecTzHSXZSCDOU

So almost one month later, the below recipe is actually feasible :

#Nextcloud + #ActiveDirectory integration over #LDAPs, with a certificate signed by a third root #CertificateAuthority 👌 🎉

@nextcloud @nextclouders @Microsoft (cc @Xysto)