If you know about how TLS works, you know the system leans heavily on Certificate Authorities (CAs) to vouch for a server’s identity. That trust model works well most of the time, but it has a weak point: any CA in the hundreds trusted by your browser or operating system can issue a valid certificate…
Category: certificates
What are CSRF tokens?
If you’ve ever dug into web security or looked through the source code of a login form, you’ve probably noticed a hidden field with a long, random-looking string tucked inside it. That’s a CSRF token — and while it might seem like a minor implementation detail, it’s one of the unsung heroes of web application…
Subject Alternative Names (SANs) in Digital Certificates
When it comes to digital certificates, the Subject Alternative Name (SAN) extension plays a crucial role in how modern systems authenticate and communicate securely. Although the Common Name (CN) field traditionally carried the hostname of a server, today it’s the SAN extension that browsers and applications actually pay attention to. In fact, industry standards have…
MIC Solutions 