Web PKI / Certificate Security10 July 2026
CA/Browser Forum Retires 11 Legacy Domain Validation Methods by 2028
Three CA/Browser Forum ballots will phase out email-, phone-, and lookup-based domain control validation, closing off some of the weakest links in how HTTPS certificates get issued.
pkitls-certificatesdomain-validation
4 min readRead
Cryptography & PKI30 June 2026
Short-Sleeve RSA: How Zero-Block Prime Structure Exposed 603 Private Keys in the Wild
Trail of Bits and the badkeys project have uncovered a new class of factorable RSA key — one defined by evenly spaced zero-bit blocks in its prime factors — and found hundreds already deployed in real TLS, SSH, and PGP infrastructure.
rsacryptographypki
4 min readRead