WebPKI, automation and the push for more agility#

Dimitris Zacharopoulos

• Why: Certificate automation and lifecycle agility sits squarely in the PM's identity/PKI interests. WebPKI is the trust root for TLS everywhere — DC, cloud, and enterprise — and the operational pain of short-lived certs, ACME, and CA/B Forum rule changes is shared across every environment.
• What: The attached deck is titled HARICA_GRNOG_20.pptx, strongly suggesting this is a talk by the HARICA CA (the Greek academic/regional certificate authority) about the state of WebPKI, certificate automation, and the push for faster certificate issuance/rotation cycles (program text and slide metadata only).
• How: Unknown from the program. Presumably a CA-operator's perspective on automation (ACME/short-lived certificates) and the policy/standards environment driving agility — the speaker is active in CA/Browser Forum and PKI standards work, so expect a standards-informed view.
• Where applicable: Broadly applicable — WebPKI affects every HTTPS endpoint. Note the perspective is that of a CA operator, not an enterprise certificate consumer, so operational detail will be issuance-side rather than fleet-rollover-side.