CIRCLE WITH A DOT

CertKit Agent 1.6: RRAS support, deploy windows, and agent locking.

Shorter lifetimes mean certificate automation has to act like real deployments: issue, deploy, verify. Deploy windows keep disruptions inside maintenance windows, and agent locking freezes commands so UI changes can’t be weaponized.

CertKit Agent update: RRAS support, deploy windows, and agent locking

The CertKit Agent now supports Microsoft RRAS for VPN certificate management. We also added deploy windows so you can control when certificate updates happen, and agent locking to protect your infrastructure even if CertKit itself were ever compromised.

CertKit SSL Certificate Management (www.certkit.io)

#CertificateAutomation #WebPKI

22,000+ incidents in the Verizon DBIR. Man-in-the-middle? Less than 4%, mostly phishing proxies. Not TLS interception.

Forward Secrecy killed "record now, decrypt later." So what actually compromises your connections?

How likely is a man-in-the-middle attack?

A stolen TLS private key sounds catastrophic. But thanks to forward secrecy, it can't decrypt recorded traffic. The only thing left is server impersonation, and that requires network position that ranges from "be in the same room" to "be a nation-state." We looked at the data on how often this actually happens.

CertKit SSL Certificate Management (www.certkit.io)

#cybersecurity #TLS