RFC 9849 makes Encrypted Client Hello a standard: it hides the site name that used to be visible during the TLS handshake. What changes for privacy, reverse proxies, CDNs, and SNI-based filtering.
As of 15 January 2026 Let's Encrypt offers everyone certificates valid for just over six days and certificates for IP addresses. What they are, why they matter, and what changes for people running…
By late October 2025, more than half of human web traffic to Cloudflare uses post-quantum cryptography. What it means, the threat it guards against, and what's still missing.
The CA/Browser Forum has approved a phased reduction of TLS certificate lifetimes down to 47 days by 2029. What changes, why, and why manual renewal no longer holds up.
A reverse proxy explained in plain terms: an intermediary in front of your applications for TLS, caching, load balancing and security. The difference from a forward proxy, and why it's a common…
RFC 9729 defines an HTTP authentication scheme that won't even reveal whether a protected resource exists: what it is, the problem it solves, and what it's for.