Blog

Protocols, security incidents, and how the internet actually works. 147 posts.

What Happens When a Root CA Gets Compromised

In 2011, DigiNotar was hacked and 500+ fraudulent certificates were issued, including *.google.com. The aftermath reshaped the entire PKI ecosystem.

"Zero Trust" Is a Marketing Term

Zero Trust started as a legitimate security architecture principle. It has been co-opted by every vendor to mean 'buy our product.' The original idea deserves better.