Certificate Transparency News Today

In my last blog post, I discussed why people often view the web as a uniquely unsuited platform for implementing end-to-end encryption (E2EE). This view is that the web doesn’t offer a long-term trustable notion of what the application is. In that earlier post, I explored the idea of treating the application as untrustworthy and isolating sensitive data from it. In this post, I’m going to pontificate on whether web applications are truly less trustworthy than native applications, especially ...

Chinese state media plays the victim after revelations emerged this week of a massive state-linked Chinese cyberattack on U.S. infrastructure.

In addition to monitoring, governments could modify content inline. For example, they could remove the narratives they want to censor.

In these past few years, outright censorship in all its forms has increased. During the covid lunacy, government and industry partnered to create a censorship-industrial complex to more efficiently promote false narratives and suppress dissidents.

European Union lawmakers and trading bloc governments reached a provisional agreement on a revised identity framework intended to digitize access to key public

How much linear algebra and polynomials do you need to know to implement Kyber? Turns out, very little!

Almost 2 years on from the last time I wrote about QWACs, I'm sadly not here to tell you that things have gone well since then. In fact, I'm actually here to tell you that things are not going well at all... QWAC Back in Jan 2022, I wrote a

The EU is poised to pass a sweeping new regulation, eIDAS 2.0. Buried deep in the text is Article 45, which returns us to the dark ages of 2011, when certificate authorities (CAs) could collaborate with governments to spy on encrypted traffic—and get away with it. Article 45 forbids browsers from...

Apples iOS 17.2 is coming soon, with amazing new iPhone security features and bug fixes that you need to know about.

Apple enhances iMessage security with "Contact Key Verification," fortifying user privacy and identity verification against evolving threats using cryptographic methods and Key Transparency.