Martijn Katerbarg

PKI, SSL, CA stuff, Programmer, Tinkerer, Datahoarder, Homelab and retro tech enthusiast, Compliance dude apparently.
Work@Sectigo. Tweets are mine

[Ryan Hurst @rmhrisk]

CABForum SCWG Ballot SC-081 just passed! WebPKI certificate maximum validity periods will now reduce according to this schedule:

[Ryan Hurst @rmhrisk]

Who wants to lose money on a browser that is so open source nearly every competing browser is just a clone with a thin veneer? I don’t see how this serves users, the Chrome team does so much more for the internet than release Chrome itself what happens to that work?

[Martijn Katerbarg @Martijn___]

@0x4a45 Status är nu ändrat till "Uploading". Oklart om det blir publikt eller inte

[Martijn Katerbarg @Martijn___]

@KarlEmilNikka Status är nu ändrat till "Uploading". Oklart om det blir publikt eller inte

[Martijn Katerbarg @Martijn___]

@KarlEmilNikka

[Martijn Katerbarg @Martijn___]

@KarlEmilNikka Och återigen, nu har 7 dagar lagts till

[Martijn Katerbarg @Martijn___]

@Totogoals @KarlEmilNikka Enligt skärmbilder så är det mycket mer. Bl. a. notiser om vem som har skyddade personsuppgifter.

[Martijn Katerbarg @Martijn___]

@KarlEmilNikka Däremot började självaste nedräkningen i första hand med kortare tid än dom flesta. Det är möjligt att om ångrade det.

[Feisty Duck @feistyduck]

Cryptography & Security Newsletter: Sectigo has published a meta-linter called pkimetal, which unifies several other prominent linters into a single tool. https://t.co/l5xzGp5PIh

[Ryan Hurst @rmhrisk]

"On numerous instances over the last three years, e-commerce monitoring GmbH fell short of the above expectations. In light of this, we have reached the conclusion that the GLOBALTRUST 2020 certificates suffer from a loss of integrity and action is required from the perspective of ensuring web security for Chrome users" https://t.co/z8HUtj4rhE

[Cryptoki @Cryptoki]

CA/Browser Forum ballot SC-067 is in discussion to require Multi-Perspective Issuance Corroboration (aka MPIC) by CAs for domain validation and CAA checks to make certain attacks on #TLS validation more difficult https://t.co/KVQJkq2nDP

[Cryptoki @Cryptoki]

Chrome updates its CA root policy at https://t.co/MHWyIXrLUR, includes term limits, key freshness etc.

[Martijn Katerbarg @Martijn___]

@atoonk @rmhrisk @DaKnObCS Not yet, but a proposal is in the works: https://t.co/afehoL5vpQ

[Nicolas Grégoire @Agarri_FR]

Not your typical SQLi vector... 😈

[Wiz @wiz_io]

🚨 BREAKING: Wiz Research discovers a massive 38TB data leak by Microsoft AI researchers, including 30,000+ internal Teams messages.

Here's what you need to know 🧵

[Martijn Katerbarg @Martijn___]

This whole AI thing, kinda made "Pics or it didn't happen" irrelevant

[Martijn Katerbarg @Martijn___]

@jedisct1 How did I not know this was in the public domain

[Tim Callan @TimCallan]

The Root Causes podcast frequently discusses the concepts of certificate automation and Certificate Lifecycle Management (CLM). In this episode we discuss how CLM does not always entail automation and vice versa - and why it matters. https://t.co/uzH9WQCnIV

[Sectigo @SectigoHQ]

Our team had a great second day at @RSAConference yesterday!

Our team is on site at booth #1327 to talk about how CA Agnostic #CLM can help with 90-day TLS.

Additionally, #webby honoree @TimCallan gave a great talk on #QuantumComputing, explaining how organizations can prepare.

[Martijn Katerbarg @Martijn___]

@manicode It is if you ask ChatGPT to add comments though🙃