TLS 1.3: better for individuals – harder for enterprises
The NCSC's technical director outlines the challenges that TLS 1.3 [...]
Setting direction for the UK’s migration to post-quantum cryptography
Why the key milestones for PQC migration are part of [...]
Timelines for migration to post-quantum cryptography
Activities which organisations must carry out to migrate safely to [...]
The problems with forcing regular password expiry
Why the NCSC decided to advise against this long-established security [...]
The problems with patching
Applying patches may be a basic security principle, but that [...]
Terminology: it’s not black and white
The NCSC now uses 'allow list' and 'deny list' in [...]
Security, complexity and Huawei; protecting the UK’s telecoms networks
With 5G set to transform mobile services, Ian Levy explains [...]
RITICS: Securing cyber-physical systems
Discover the Research Institute in Trustworthy Inter-connected Cyber-physical Systems.
Technical report: Responsible use of the Border Gateway Protocol (BGP) for ISP interworking
Technical report on best practice use of this fundamental data [...]
Summary of the NCSC analysis of May 2020 US sanction
A summary of the NCSC’s analysis of the May 2020 [...]
