https://nalar.dev/tags/pki/ Recent content in PKI on Nalar Hugo en-us Sat, 12 Sep 2026 00:00:00 +0700 https://nalar.dev/use-certificate-transparency-as-a-detection-signal/ Sat, 12 Sep 2026 00:00:00 +0700 https://nalar.dev/use-certificate-transparency-as-a-detection-signal/ <p>A TLS certificate can be valid in every cryptographic sense and still be operationally unexpected. A forgotten staging host may receive a certificate through an automated pipeline. A vendor may issue for a delegated subdomain that the central security team did not know existed. More seriously, an attacker who gains control of a DNS validation path or a certificate-authority account may obtain a certificate for a name they should not control.</p>