TLS

Cloudflare has announced work on a certificate authority designed to serve the entire Internet, detailing the technical and operational challenges of issuing TLS certificates at global scale. The post, also drawing attention on Hacker News, walks through how a CA must balance security, automation and trust to keep encryption working across the web.

Cloudflare has published a blog post explaining how it built and operates a certificate authority at Internet scale, covering the technical and trust challenges of issuing TLS certificates for millions of websites. The piece is drawing attention among developers and security engineers discussing how public key infrastructure underpins the web's encryption.

A new entry has been added to cybersecurity conference listings: ATLSECCON, taking place April 8-9, 2027 in Halifax, Nova Scotia, Canada. The Atlantic Canada security gathering is now on the calendar for infosec professionals planning next year's event schedule, with details available on its official website.

Cloudflare announced on Tuesday that it plans to issue quantum-proof TLS certificates, becoming one of the first certificate authorities to adopt cryptography designed to withstand attacks from quantum computers. The move addresses fears that future quantum machines could break today's encryption, exposing data collected now and decrypted later. Observers see it as a significant step in the industry's transition to post-quantum security.

Cloudflare has announced it is now operating as a certificate authority, issuing TLS certificates at global scale. The company says the move is aimed at making secure HTTPS connections more accessible to everyone, building on its existing infrastructure business. The announcement is drawing attention from developers and security professionals discussing what a new large-scale CA means for the web's certificate ecosystem.

wolfSSL announced that its TLS library now supports the ACE cryptographic accelerator on NXP's S32K3 microcontrollers. The integration enables hardware-accelerated encryption on the automotive-grade S32K3 family, improving performance and efficiency for embedded security applications. The announcement is circulating among embedded and cryptography communities interested in secure automotive and industrial systems.

NASA's Astronomy Picture of the Day website is currently inaccessible to visitors because its TLS certificate is issued for go-vip.co rather than nasa.gov or apod.nasa.gov, triggering browser security warnings. go-vip.co redirects to WordPress VIP, suggesting the agency's hosting provider generated the site certificate incorrectly. Users are sharing the error online as they try to view the popular daily image page.

Cloudflare has announced plans to issue quantum-safe TLS certificates as part of a major overhaul of the website authentication ecosystem. The move is aimed at protecting encrypted web traffic against future attacks by quantum computers, which could eventually break today's widely used cryptographic algorithms. Security watchers are highlighting it as a significant step toward post-quantum encryption across the web.

A system administrator ran a TLS check against apod.nasa.gov and found the site's certificate chain shows a validity window starting in late 2026, issued via Let's Encrypt. The odd future-dated dates have drawn amused attention from tech observers, who note that such entries usually point to certificate misconfiguration or overlapping issuer logs rather than anything nefarious. NASA has not commented on the quirk.