@staylightblow8: Let's Encrypt issues about 10 million free TLS certificates every day, serving over 500 million websites, and Cloudflar…
Summary
Cloudflare is preparing to become a Certificate Authority itself after acquiring a GlobalSign root certificate, motivated by the systemic risk of relying on Let's Encrypt's concentration in the free TLS certificate market. The move raises questions about whether it will decentralize Web PKI or create an even larger central point.
Similar Articles
Cloudflare plans to issue quantum-safe TLS certificates
Cloudflare plans to issue quantum-safe TLS certificates using Merkle Tree Certificates, replacing quantum-vulnerable signature chains with compact Merkle Tree proofs and coupling certificate issuance with transparency logs. Issuance is expected to begin in the first quarter of 2027.
A Post-Quantum Future for Let's Encrypt
Let's Encrypt announces plans to adopt Merkle Tree Certificates for post-quantum authentication, addressing the growing urgency to migrate to post-quantum signatures in the Web PKI.
TLS certificates for internal services done right
Explains how to set up TLS certificates for internal services using split-horizon DNS, a VPN with DNS resolver, and ACME clients like acme.sh with Let's Encrypt, providing a practical alternative to self-signed certificates.
Hackers obtain counterfeit TLS certificates for Google and other large services
Hackers hijacked ccTLD registries to obtain counterfeit TLS certificates for Google and other large services by manipulating DNS records to pass domain-control validation checks.
The Internet goes on high alert after discovery of 8 compromised TLS certs
Eight compromised TLS certificates issued by Indian CA eMudra were discovered with shockingly weak private keys (3-8 bits of entropy instead of the expected 384), prompting widespread alarm across the internet and comparisons to the Heartbleed crisis.