PKI & Cryptography

Certificates, CAs, ACME, HSMs, and the math behind public-key infrastructure.

PKI6 min readApr 22, 2026

Passkeys: The Future of Web Authentication

Passkeys replace passwords with asymmetric cryptography bound to your device and unlocked by a biometric. How they actually work, why they're better, and where they still fall short.

passkeyswebauthnfido2

PKI8 min readMar 10, 2026

Certificate Lifecycle Management: From Issuance to Revocation

Expired certs cause outages. Mis-issued ones cause breaches. A disciplined lifecycle process kills both failure modes — here's how to build one that actually survives contact with production.

pkicertificate-managementacme

PKI8 min readDec 20, 2025

Understanding Let's Encrypt: ACME, CT Logs, and the Trust Model

Let's Encrypt has issued over three billion certificates and quietly rewired the trust model of the public web. The ACME protocol, Certificate Transparency, the chain of trust — how it actually works, and how to run it at scale.

lets-encryptacmecertificate-transparency

3 posts