A seismic shift is hitting the digital certificate landscape. Google has announced strict enforcement of Extended Key Usage (EKU) policies for all certificates in the Chrome Root Store, effective June 15, 2026. This means the days of using a single TLS certificate for multiple purposes, like client authentication, internal microservices, or code signing, are numbered. In this episode of Encryption Edge, we explore how this update, paired with the new 47-day maximum certificate lifespan, is forcing enterprises to rethink everything from certificate architecture to lifecycle management. 
 
Key Takeaways:
What Google's EKU enforcement means for your infrastructure
How shorter certificate lifespans demand automation
Real-world risks of non-compliance, including outages and distrust
Why internal PKI, CLM automation, and CA agility are now must-haves
Immediate actions security and DevOps teams should take

Inside Google’s Certificate Reform: Shorter Lifespans, Stricter Rules

The European Union has released a detailed roadmap to guide its transition to post-quantum cryptography, and it's set to impact organizations worldwide. In this episode of The Encryption Edge, Wyatt Hackathorne unpacks what the roadmap means, the urgent timelines it sets, and the concrete actions organizations should take today. From understanding the "store now, decrypt later" threat to preparing your supply chain and internal systems for cryptographic agility, this episode is your essential guide to navigating one of the most important shifts in cybersecurity.

Decrypting the EU’s Post-Quantum Cryptography Roadmap

In this episode, host Wyatt Hackathorne breaks down the new bipartisan National Quantum Cybersecurity Migration Strategy Act introduced in late July 2025. The bill, a critical follow-up to the June Executive Orders, mandates a coordinated national strategy for transitioning federal systems to quantum-safe encryption. Learn how this combined effort provides the U.S. with a clear roadmap to proactively secure its data against the looming threat of quantum computers.

U.S. Quantum Readiness Takes a Leap

The clock is ticking on quantum computing, but how prepared is the web for the new era of encryption? In this episode of The Encryption Edge, host Wyatt Hackathorne explores the current state of PQC adoption. We reveal surprising disconnects between what's needed and what's being done, from lagging industries to unprepared browsers. Learn why the "harvest now, decrypt later" threat is a real danger, why some of the most popular websites are the least secure, and what organizations must do now to future-proof their data before it's too late.

The Quantum Countdown: Is Your Website at Risk?

Microsoft's plan for quantum-safe security is here. In this episode of The Encryption Edge, we break down the company's comprehensive, multi-year strategy to transition its entire ecosystem, from Windows and Azure to its customers and partners into the quantum era. Discover the three key phases of their Quantum Safe Program and learn why this blueprint is a crucial guide for any business looking to protect its data before it's too late.

Deciphering the Microsoft Quantum Safe Program

The quantum clock is ticking, and Canada has a plan. In this episode of The Encryption Edge, we break down the Government of Canada's new roadmap for transitioning its IT systems to post-quantum cryptography. We explore the three-phase strategy, from preparation and discovery to full-scale transition, and reveal the key milestones and deadlines set for federal departments. We'll also dive into a head-to-head comparison, examining the commonalities and key differences between Canada's approach and the European Union's PQC roadmap. Find out how two major global players are tackling the same quantum threat, and what their strategies mean for the future of digital security.

Decrypting Canada's PQC Roadmap

A security incident involving a mis-issued certificate for Cloudflare's 1.1.1.1 DNS service has exposed a serious vulnerability. We break down how an obscure Certificate Authority, trusted by Microsoft but not others, left Windows users exposed to a potential man-in-the-middle attack. Join us as we explore the deeper systemic issues at play, from the failure of automated monitoring to the broader pattern of governance failures in the Web PKI. We also discuss why this incident is a critical reminder of the dangers of passive trust and how new regulations like eIDAS 2.0 could make the problem even worse.

The 1.1.1.1 Certificate Scandal: A Wake-Up Call for Microsoft’s Root Program

Building a resilient global payments platform just got a lot easier. In this episode, we dive into the major September 2025 announcement from AWS: the new Multi-Region keys for AWS Payment Cryptography. We break down how this game-changing feature automates key replication, eliminating the need for complex, custom frameworks. Discover how this no-code solution provides unbreakable availability, simplifies global operations, and gives you the peace of mind that your cryptographic foundation is built to withstand any challenge.

Zero Code, Global Trust: AWS's New Approach to Key Replication

This is the definitive guide. We break down the full NIST Post-Quantum Cryptography Migration Initiative and its strategic report, the CSWP 48 ipd. Learn how NIST has already mapped your PQC migration steps to both the Cybersecurity Framework and SP 800-53, giving you the immediate justification and plan you need to tackle the quantum threat and simplify your security job. 

Decrypting the NIST Post-Quantum Cryptography Migration Initiative

The Encryption Edge – Your go-to podcast for all things encryption, cybersecurity, and data protection. Whether you're an industry expert or just getting started, we break down complex topics like cryptography, PKI, post-quantum security, and cloud encryption in a way that's easy to understand. Stay ahead of emerging threats, compliance requirements, and the latest security trends with expert insights and practical advice from Encryption Consulting.

Zero Code, Global Trust: AWS's New Approach to Key Replication

Encryption Consulting

Related tracks