Passkeys: The Future of Web Authentication
Passkeys replace passwords with asymmetric cryptography bound to your device and unlocked by a biometric. How they actually work, why they're better, and where they still fall short.
passkeyswebauthnfido2
Certificates, CAs, ACME, HSMs, and the math behind public-key infrastructure.
Passkeys replace passwords with asymmetric cryptography bound to your device and unlocked by a biometric. How they actually work, why they're better, and where they still fall short.
Expired certs cause outages. Mis-issued ones cause breaches. A disciplined lifecycle process kills both failure modes — here's how to build one that actually survives contact with production.
Let's Encrypt has issued over three billion certificates and quietly rewired the trust model of the public web. The ACME protocol, Certificate Transparency, the chain of trust — how it actually works, and how to run it at scale.
3 posts