This article provides a comprehensive analysis of WebPKI (Web Public Key Infrastructure), examining the technical, social, and political complexities behind HTTPS encryption. It explores certificate management issues including expiration, revocation challenges, and recent incidents like the Entrust certificate crisis affecting millions of websites. The piece offers critical insights into the vulnerabilities and governance challenges of the system that underpins web security.
Background
WebPKI is the public key infrastructure that enables HTTPS encryption on the web, relying on certificate authorities to verify website identities. This system has become increasingly important as the web has shifted from HTTP to HTTPS for security.
- Source
- Lobsters
- Published
- Mar 9, 2026 at 07:58 AM
- Score
- 7.0 / 10