Blog on PKI Consortium

IBM Becomes a Diamond Sponsor of the PKI Consortium

feedback@pkic.org (PKI Consortium) — Mon, 02 Mar 2026 12:00:00 +0000

The PKI Consortium is proud to announce that IBM — a valued member since January 2024 — has become a Diamond Sponsor. This milestone reflects IBM’s deep commitment to advancing Public Key Infrastructure and accelerating the global transition to Post-Quantum Cryptography. IBM’s support helps sustain the Consortium’s working groups, research initiatives, global education programs, and the world’s largest dedicated Post-Quantum Cryptography Conference.

Post-Quantum Cryptography Conference 2025 Concludes with Urgent Call for Global Migration to Quantum-Resistant Encryption Systems

feedback@pkic.org (PKI Consortium) — Tue, 04 Nov 2025 00:00:00 +0000

The world’s largest dedicated gathering on post-quantum cryptography, the Post-Quantum Cryptography Conference 2025, concluded in Kuala Lumpur with a resounding global message: the time to act is now to safeguard the world’s digital economy before quantum computers render today’s encryption obsolete.

Defining Quantum-Readiness: Introducing the Post-Quantum Cryptography Maturity Model

feedback@pkic.org (PKI Consortium) — Mon, 27 Oct 2025 08:00:00 +0000

As the industry moves toward a post-quantum future, terms like “quantum-ready” and “quantum-safe” are everywhere; but what do they actually mean in practice? The PKI Consortium PQC Working Group has developed a draft Post Quantum Cryptography Maturity Model (PQCMM) to provide clarity for organizations and vendors alike. This model defines maturity levels for PQC adoption across all products and solutions that rely on cryptography. We invite feedback to refine this framework before it becomes an industry reference.

Global Leaders Converge in Kuala Lumpur to Drive Quantum-Safe Future at World’s Largest Post-Quantum Cryptography Conference

feedback@pkic.org (PKI Consortium) — Mon, 27 Oct 2025 07:00:00 +0000

The PKI Consortium announced that the Post-Quantum Cryptography (PQC) Conference will take place from 28 to 30 October 2025, at the Connexion Conference & Event Centre in Kuala Lumpur, Malaysia, bringing together over 2,500 delegates from government, industry, and academia. This event marks the world’s largest dedicated global conference on post-quantum cryptography ever held. The three-day program will feature hands-on workshops, high-level plenaries, and technical tracks focused on the standards, implementation strategies, and policy frameworks required to secure digital infrastructure against emerging quantum threats.

Call for Abstracts: PQC Conference 2025 - Kuala Lumpur, Malaysia

feedback@pkic.org (PKI Consortium) — Wed, 07 May 2025 07:00:00 +0000

The PKI Consortium invites researchers, practitioners, and industry leaders to submit abstracts for the PQC Conference 2025 in Kuala Lumpur, Malaysia. This hybrid event (October 28-30, 2025) will focus on the status and practical implementation of post-quantum cryptography across strategic and technical dimensions.

Key Takeaways of the PQC Conference in Austin

feedback@pkic.org (PKI Consortium) — Thu, 30 Jan 2025 07:00:00 +0000

Over two days of intensive programming, experts delivered compelling presentations and engaged in insightful panel discussions, both in plenary sessions and concurrent breakout tracks. This year, the focus shifted decisively from theoretical exploration to concrete, actionable steps for implementing quantum-safe cryptography. The key takeaway was clear: delay poses the greatest risk, and immediate action is essential to achieve quantum resilience.

Third Post-Quantum Cryptography Conference: Join us in Austin, Texas!

feedback@pkic.org (PKI Consortium) — Tue, 22 Oct 2024 08:00:00 +0000

Join us on January 15 and 16, 2025, at the Thompson Conference Center, University of Texas, Austin for the third Post-Quantum Cryptography Conference. Explore the future of cryptography with industry leaders, technical experts, and decision-makers from across the globe.

On the Drawbacks of Post-Quantum Cryptography in TLS

feedback@pkic.org (PKI Consortium) — Fri, 27 Sep 2024 12:00:00 +0000

Ongoing efforts to deploy PQ/hybrid KEMs as drop-in replacements for current mechanisms are well-tested and crucial for protecting information and identity in the near future. On the other hand, PQ signatures remain an unsolved problem - at least in terms of being drop-in replacements for ECC/RSA.

A list of cryptographic devices that includes support for remote key attestations

feedback@pkic.org (PKI Consortium) — Fri, 22 Mar 2024 12:00:00 +0000

The PKI Consortium is managing a a list of cryptographic devices that includes support for remote key attestations, without endorsing their implementation or quality.

Second Post-Quantum Cryptography Conference: Register now to join us in Amsterdam or Online!

feedback@pkic.org (PKI Consortium) — Thu, 31 Aug 2023 11:00:00 +0000

Join us on November 7 and 8, either in-person at the Meervaart in Amsterdam or remotely online. Explore the forefront of Post-Quantum Cryptography with renowned speakers from NIST, ENISA, BSI, and more. Registration is free and open to all, not limited to PKI Consortium members.

Introducing first PKI Maturity Model (PKIMM)

feedback@pkic.org (PKI Consortium) — Thu, 10 Aug 2023 10:05:00 +0000

The PKI Consortium publishes initial draft of the PKI maturity model with related resources to help the industry build mature and future proof PKI including guidelines on how to evaluate the assessment and provide reporting to relying parties. The PKI maturity model is recognized as a standard for evaluation, planning, and comparison between different PKI implementations. In this blog post we are going to introduce the model.

PKI Consortium Unveils the first PKI Maturity Model for feedback

feedback@pkic.org (PKI Consortium) — Thu, 10 Aug 2023 10:00:00 +0000

The PKI Consortium, a dynamic alliance dedicated to enhancing trust and security within the digital landscape, proudly announces the preview release of its pioneering PKI Maturity Model. A collaborative effort by the PKI Maturity Model Working Group, this model will revolutionize the way organizations can plan, evaluate, and compare Public Key Infrastructure (PKI) implementations.

Call for Post-Quantum Cryptography presentations

feedback@pkic.org (PKI Consortium) — Tue, 07 Mar 2023 15:00:00 +0000

Call for Presentations

We are pleased to announce that we are currently welcoming submissions for presentation proposals at the upcoming PKI Consortium’s Post-Quantum Cryptography Conference. The conference will be held on November 7-8, 2023, in the vibrant city of Amsterdam, the Netherlands.

A successful first Post-Quantum Cryptography Conference

feedback@pkic.org (PKI Consortium) — Tue, 07 Mar 2023 08:00:00 +0000

The PKI Consortium held its first Post-Quantum Cryptography conference on Friday March 3, in Ottawa, Canada. With a hundred attendees onsite and over six hundred attendees watching the live stream, it was a resounding success.

Sharing information on Post-Quantum Cryptography Capabilities

feedback@pkic.org (PKI Consortium) — Thu, 26 Jan 2023 12:00:00 +0000

The PKI Consortium is managing a PQC Capabilities Matrix of software applications, libraries and hardware that includes support for Post-Quantum Cryptography, without endorsing their implementation or quality.

You are invited to participate in the PKI Consortium’s first Post-Quantum Cryptography (PQC) conference

feedback@pkic.org (PKI Consortium) — Wed, 30 Nov 2022 14:00:00 +0000

Speakers at this conference include some of the world’s top Post-Quantum Cryptography (PQC) experts and come from government science agencies, standards bodies, and private organizations at the forefront of this new challenge to digital security. Topics will cover the status of PQC standardization at NIST, ETSI, and IETF, government preparations, migration strategies, etc.

What is the PKI Maturity Model (PKIMM) and how can you contribute?

feedback@pkic.org (PKI Consortium) — Mon, 11 Jul 2022 08:00:00 +0000

The PKI Consortium recently established the PKI Maturity Model Working Group to build a PKI maturity model that will be recognized around the globe as a standard for evaluation, planning, and comparison between different PKI implementations. In this blog post we will tell you more about why we are building the model and how you can contribute to it.

An open letter to Apple

feedback@pkic.org (PKI Consortium) — Mon, 21 Mar 2022 15:00:00 +0000

We would like to thank and also invite Apple to work more closely with organizations such as the CA/Browser Forum, ETSI and the PKI Consortium to address its concerns, work towards harmonization of policies and to support standardized automation in its software before making any changes on its own. This is because unilaterally enforced policies, especially those that go beyond your own root program, can have a disproportionate impact on PKI implementations, its relying parties and the entire ecosystem.

PKI Consortium & ETSI sign Memorandum of Understanding (MoU)

feedback@pkic.org (PKI Consortium) — Thu, 03 Mar 2022 11:00:00 +0000

On 26 January PKI Consortium and ETSI signed a Memorandum of Understanding (MoU) to structure and strengthen the relationship between both organizations and foster a closer relationship.

Creating a global List of Trust Lists

feedback@pkic.org (PKI Consortium) — Wed, 24 Nov 2021 15:00:00 +0000

The PKI Consortium is curating a global List of Trust Lists (a curated list of root, intermediate or issuing CA certificates accepted by a public, private, industry, or solution-specific PKI), one that is not limited to a specific purpose, region, or size, and is open to anyone to contribute.

Increasing support and awareness for Remote Key Attestation

feedback@pkic.org (PKI Consortium) — Tue, 03 Aug 2021 12:00:00 +0000

The PKI Consortium is collecting information (and looking for contributions) on how or if solutions provide a method to prove to a remote party that a private key was generated, managed inside, and not exportable from, a hardware cryptographic module.

From CASC to the Public Key Infrastructure Consortium

feedback@pkic.org (PKI Consortium) — Mon, 12 Jul 2021 07:43:06 +0000

Over the years, the need for private, industry, or solution-specific PKI has grown significantly, with stricter policies and the revocation of certificates and CAs becoming more common. The impact of changes in centralized PKI have caused delays and disruption of third-party services that may or may not have been considered. Any PKI (public, private, or specific) must operate according to best practices, clear policies and without a single point of failure.

One Year Certs

feedback@pkic.org (PKI Consortium) — Thu, 09 Jul 2020 18:43:06 +0000

Starting on September 1st, SSL/TLS certificates cannot be issued for longer than 13 months (397 days). This change was first announced by Apple at the CA/Browser Forum Spring Face-to-Face event in Bratislava back in March.

Could Quantum Computing Help Stave Off the Next Great Pandemic?

feedback@pkic.org (PKI Consortium) — Thu, 11 Jun 2020 20:00:40 +0000

As we settle into month two of isolation in the world’s collective battle against the COVID-19 pandemic, one talking point you’ve undoubtedly heard time and again is that this won’t truly be over until there’s a vaccine. A post about how quantum computing could simplify it and reduce the time it takes exponentially.

How to do HTTPS … The Right Way

feedback@pkic.org (PKI Consortium) — Tue, 02 Jun 2020 14:30:09 +0000

With secure HTTP — aka HTTPS (the “S” is short for “secure”) — swiftly becoming universal on the Internet, it is important to know how to configure HTTPS for your website the right way. The payoff for properly securing your website has many benefits.

Don’t ‘Compromise’ Your Code Amid Malware Mayhem

feedback@pkic.org (PKI Consortium) — Tue, 12 May 2020 18:18:10 +0000

Code Signing Certificates demand a price premium in the underground online marketplace. This is no surprise considering that criminals sometimes use them to dupe their potential victims into installing malware in their machine.

Digital Trust Is Elusive – Are Qualified Trust Services A Solution?

feedback@pkic.org (PKI Consortium) — Fri, 01 May 2020 17:00:58 +0000

A popular saying goes: “Trust takes years to build, seconds to break, and forever to repair.”

While I wouldn’t completely agree, the idea isn’t wrong. In real life trust between two parties is established over some period of time, depending on a variety of factors. Have you ever wondered why you initially trust some people more and others less, even if you’ve never met them before? There are a complicated multitude of factors that influence our thoughts: the person’s appearance, tone of voice, title or rank, etc. Trust is established over time but can be lost within a few moments.

Preparing for Quantum Computing

feedback@pkic.org (PKI Consortium) — Tue, 21 Apr 2020 17:09:27 +0000

Quantum computing is advancing, and while experts are not sure when there will be a quantum computer powerful enough to break the RSA and ECC cryptographic algorithms that are currently in use, many are operating under the assumption that this can happen within a 10-15 year timeframe.

5 Ways to Keep Up with Authentication Certificates

feedback@pkic.org (PKI Consortium) — Mon, 24 Feb 2020 13:38:54 +0000

When it comes to protecting an organization’s data and users, CISOs have no shortage of hurdles. Identity attacks have become sophisticated and convincing, thanks to ransomware, phishing and deep fakes. CISOs have long known the importance of strong identification and authentication controls, but with threats constantly changing and intensifying, having these controls in place is just one piece of the puzzle; they must be managed correctly in order to do their job.

The CA Security Council Looks Ahead to 2020 and Beyond

feedback@pkic.org (PKI Consortium) — Thu, 09 Jan 2020 21:00:24 +0000

A whirlwind of activity will cause dramatic shifts across the PKI world in the year ahead

Suffice it to say that 2019 was filled with challenges and contentiousness as Certificate Authorities and Browsers began to watch their shared visions diverge. The debate around Extended Validation continued as CAs pushed for a range of reforms and browsers pushed to strip its visual indicators. And a ballot to shorten maximum certificate validity periods exposed fault-lines at the CAB Forum.