Install
Web Standards & Protocols
HTTP/3, QUIC, TLS, HTML/CSS/JS, and IETF/W3C developments.
- 5 Tracked terms
- Last 30 days Feed window
What this topic collects on
An article joins this feed when it matches these terms. Each one is also a search of its own.
Related topics
Latest in Web Standards & Protocols
SSL vs TLS: TLS 1.3 Hits 72% Share, SSL at 0% [2026]
1+ day, 15+ hour ago (980+ words) SSL 2.0 shipped publicly in 1995 and was riddled with design flaws serious enough that the IETF formally retired it 16 years later through RFC 6176. SSL 3.0 followed in 1996 and lasted longer, but the 2014 POODLE attack exposed a padding weakness severe enough that the…...
How To Fix net::err_cert_authority_invalid Error In Chrome?
1+ day, 15+ hour ago (956+ words) Chrome blocks the page and shows “Your connection is not private.” Under it sits net::err_cert_authority_invalid. Chrome is not rejecting the address you typed. It rejects the certificate the site handed over, and the body that signed it. Sometimes the fault…...
Your connection is not private
2+ day, 17+ hour ago (67+ words) Attackers might be trying to steal your information from www.north-star-news.co.uk (for example, passwords, messages, or credit cards). Learn more about this warning Issuer: ZeroSSL ECC DV SSL CA 2 Expires on: Oct 12, 2026 Current date: Oct 4, 2026 This server could…...
Cloudflare is preparing free post-quantum TLS certificates – the first ones will be available in 2027
5+ day, 18+ hour ago (267+ words) Долучайтеся до клубу УП! Cloudflare has announced the creation of its own certification authority and plans to issue post-quantum TLS certificates for free. The company plans to launch the first of these in the first quarter of 2027. TLS certificates verify…...
X25519-only TLS ends for GHE.com on October 7 - GitHub Changelog
6+ day, 10+ hour ago (127+ words) Beginning October 7, 2026, GitHub Enterprise Cloud with data residency will no longer accept TLS connections from clients that offer only X25519 for key agreement. Most customers don’t need to take action. The affected endpoints will continue to support the FIPS-approved P-256 (secp256r1) and…...
Post-quantum website certificates from Cloudflare are scheduled for early 2027
1+ week, 20+ min ago (422+ words) Help Net Security Post-quantum website certificates from Cloudflare are scheduled for early 2027 Cloudflare plans to become a public certificate authority (CA), an organization that issues the digital certificates websites use to encrypt traffic and prove who they are. The company…...
How to Decode & Inspect X.509 SSL Certificates and CSRs Without OpenSSL (or Leaking Data to Unknown Servers)
1+ week, 1+ day ago (381+ words) A few months back, I was helping migrate an internal API gateway to a fresh Kubernetes cluster. It was late on a Friday afternoon. We generated a new Certificate Signing Request (CSR), submitted it to our enterprise CA, wired up…...
Why You Should Not Always Choose a Cheap SSL Certificate
1+ week, 4+ day ago (611+ words) An SSL certificate is a crucial part of a website's security and protection of visitors. It enables a website to be secured with HTTPS and to encrypt data sent from a website to a visitor's browser. This is particularly crucial…...
How to fix the “Your connection isn’t private” error
2+ week, 16+ hour ago (1422+ words) Whatever the real cause, you should not ignore the warning without investigating its trigger. In this guide, I’ll explain what the “Your connection isn’t private” error means, what the typical causes are, and share my safe fixes. The exact warning…...
The hostname you visit over HTTPS is sent in plain text
3+ week, 21+ hour ago (638+ words) So I captured the first thing my machine sends when it opens an HTTPS connection, the TLS ClientHello, and went looking for the hostname in the bytes. It was not hard to find. Here is the ClientHello openssl sent when…...