https://blogs.damiendye.uk/en/tags/certificates/ Recent content in Certificates on Damien Dye's Blog Hugo en-GB Sun, 27 Sep 2026 18:00:00 +0100 https://blogs.damiendye.uk/en/dns/dnssec-the-root-is-signed-you-are-not/ Sun, 27 Sep 2026 18:00:00 +0100 https://blogs.damiendye.uk/en/dns/dnssec-the-root-is-signed-you-are-not/ Counted from the live root zone: 1,351 of 1,438 TLDs are signed, every single gTLD among them. Then it stops. 39 of 2,390 live gov.uk domains, 1 of 9 certificate authorities, and windowsupdate.com has no DS at all. What DNSSEC stops, what is really blocking it, and whether the problem is that we still do not understand DNS. https://blogs.damiendye.uk/en/certificates/webex-certificates-on-a-build-server/ Tue, 15 Sep 2026 09:30:00 +0100 https://blogs.damiendye.uk/en/certificates/webex-certificates-on-a-build-server/ Webex on Linux says "Offline - No internet connection" on a machine whose network is fine: the OpenSSL Cisco ship looks for its trust store inside their own build container. What breaks, the fixes that fail, the one that works, what the build process got wrong, and how a security appliance vendor ships a client that cannot check a certificate.