Every story tagged PKI, curated for CIOs and IT leaders — ranked by source credibility, engagement, and freshness.
3 stories · open in the command center
Current public key infrastructure for individuals relies on custodial intermediaries (email providers, social platforms, CAs) that can be compromised, coerced, or revoked, creating a fundamental security gap despite end-to-end encryption claims—most users never verify key bindings anyway. Self-sovereign PKI using blockchain-based systems like Spaces offers an alternative where cryptographic identities are permanently bound to names without requiring trust in any operator, platform, or certificate authority. IT organizations must recognize this emerging architecture as it challenges traditional identity models and will likely influence how enterprise security, authentication, and encryption frameworks evolve.
DNS root key cryptographic material requires regular rolling to maintain security as computational capacity evolves, with particular urgency given the future threat of quantum computing to 20+ year secrets. The DNS root key (KSK) has been in service for 8+ years—far longer than other DNSSEC keys—creating a critical vulnerability that will become untenable if post-quantum cryptographic standards must be adopted. IT organizations must begin planning for accelerated root key rotation cycles and prepare infrastructure for the eventual transition to quantum-resistant algorithms to protect the foundational DNS infrastructure.
X.509 certificate revocation practices are undergoing significant changes driven by the CAB Forum and Let's Encrypt, with major implications for PKI trust infrastructure that underpins critical internet protocols like TLS. Organizations must understand evolving revocation mechanisms and upcoming changes (notably in May 2026) to maintain the security assurances that protect encrypted communications and prevent man-in-the-middle attacks. These shifts require IT teams to review certificate lifecycle management processes, monitoring systems, and incident response procedures to ensure continuous trust validation across their digital infrastructure.