TLS Academy
Educational content covering TLS fundamentals, best practices, and practical knowledge for engineers and security professionals.
What is TLS? Learn the fundamentals of Transport Layer Security and how it protects your data in transit. Cipher Suites Understand how cipher suites work and what makes a strong TLS configuration. What is a CSR? Certificate Signing Requests explained: what they are, how they work, and when to use them. OCSP Online Certificate Status Protocol: how certificate revocation checking works. Certificate Lifecycle Best practices for managing certificates from request to renewal to revocation. What is post-quantum cryptography? Why quantum computers break RSA and elliptic curves, and what ML-KEM, ML-DSA and SLH-DSA replace them with. Harvest now, decrypt later The attack driving the post-quantum migration: recorded traffic today, decrypted tomorrow. ML-KEM explained How a KEM differs from Diffie–Hellman, and why TLS settled on the hybrid X25519MLKEM768 group. How to enable post-quantum TLS Turn on X25519MLKEM768 in nginx, Apache, HAProxy, Caddy and the big CDNs — usually one line. Post-quantum certificates Where ML-DSA certificates actually stand, why no public CA issues them yet, and why that is fine.