GIGAZINE

Let's Encrypt details changes to certificate issuance, including new certificate chains, removal of Client Authentication EKU, and shorter certificate validity periods.

Let's Encrypt has announced details of its overall policy regarding certificates issued going forward, including 'certificate chain renewal,' 'removal of TLS client authentication EKU (Enhanced Key ...
The Hacker News

GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

GoAhead can accept revoked client certificates on affected OpenSSL mutual-TLS builds despite configured revocation lists; ...
Redmond

Microsoft Previews Advanced Customizations for Certificate-Based Authentications

The Microsoft Entra ID Conditional Access service is now previewing more "granular" controls over certificate-based authentication methods, per a Tuesday announcement. The more granular controls, at ...

Eight eMudhra certificates compromised: Cloudflare lists updates users need to install

Cloudflare has disclosed that private keys tied to eight eMudhra intermediate certificates were compromised, allowing ...