# Duncan T.

Duncan Trawick shares cybersecurity content on PKI and digital trust, including certificate management, post-quantum readiness, supply-chain security, and machine identity for AI systems. Their posts also discuss Keyfactor products and company content.

- Profile: https://b2binfluencer.marketing/creators/duncan-t/
- LinkedIn: https://www.linkedin.com/in/duncan-trawick
- LinkedIn followers: 1,202
- Topics: artificial-intelligence, supply-chain, email-marketing, agentic-ai, post-quantum-cryptography
- Based on 13 dated posts, latest 2026-09-08

## Summary

Duncan Trawick is most useful for concise cybersecurity posts that connect PKI, certificate and post-quantum changes to practical implications.

- Best for: A cybersecurity software brand needing technical content and demand assets on PKI and digital trust.
- Not for: A consumer VPN brand seeking paid video, affiliate promotion, competitor comparisons, or mainstream nontechnical reach.
- Check first: Confirm recent impressions, unique viewers, follower growth, per-post performance, and audience job function data.

### Takeaways

- CAB Forum approved cutting public SSL/TLS certificate maximum lifespan from 398 to 47 days by 2029.
- Crypto-agility webinar takeaways: find cryptographic vulnerabilities, move toward quantum-safe transition, understand widened product stack.
- Autonomous AI is framed as reason to strengthen machine identity, with PKI as existing layer.

## Main ideas

- **Certificate lifespans are collapsing, making automation essential**: Duncan Trawick's clearest original argument is that a standards decision turns certificate management into a deadline problem, not a hygiene chore. Publicly trusted SSL/TLS certificates will have to be replaced far more often, making automation essential for discovery, inventory, and lifecycle management. The post also links this change to the industry's move toward post-quantum cryptography by 2030, treating certificate automation and quantum readiness as one planning problem.
- **Crypto-agility starts with seeing what you already run**: A second recurring position is that organisations cannot plan a quantum-safe transition until they can find and fix the cryptography already in production. Cryptographic visibility and control come first; the migration timeline follows. Rather than framing agility as a future swap of algorithms, the argument puts invention and vulnerability-finding first, making vendor tooling useful to buyers—and the InfoSec Global and CipherInsights acquisitions relevant to them.
- **Autonomous AI needs machine identity, and PKI is the layer that already exists**: The argument is that autonomous systems create an accountability gap before they create a new security category. When agents make decisions on behalf of enterprises, operate inside connected environments, and lack encryption and mature identity frameworks, trust becomes an identity question, not a model question. The conclusion is conservative rather than disruptive: the foundations of digital trust do not need replacing; they need to extend to cover machines. Keyfactor CSO Chris Hickman makes the supporting case in a Forbes article; Duncan Trawick frames it with the surrounding questions.
- **The trusted partner is the weakest link in the chain**: A recurring priority is that exposure comes through suppliers, not direct attacks on the target. Both posts on this theme amplify someone else's investigation rather than describing the technical mechanics: a television segment in one case, a sector research report relayed through technology press in the other. The consistent claim is that a single compromised or careless partner can carry risk across an entire supply chain.
- **Industry recognition and product milestones show that a problem is real**: A steady format turns company news into a signal about the market. Awards, webinars, and acquisitions are presented not as announcements to celebrate but as proof of demand for scalable PKI and crypto management. This is the most promotional thread in the set, showing what Duncan Trawick chooses to put their name behind: capability claims tied to a named problem, rather than product features in isolation.

## Work to read

- [CAB Forum moves to cut certificate lifespans to 47 days](https://www.linkedin.com/posts/duncan-trawick_ssl-tls-pki-activity-7317623455179296771-ld3n)
- [Crypto-agility webinar framed around the InfoSec Global acquisition](https://www.linkedin.com/posts/duncan-trawick_postquantum-cryptoagility-cybersecurity-activity-7330596472842768387-2Q-4)
- [A question-led case for identity and encryption in agentic AI](https://www.linkedin.com/posts/duncan-trawick_ai-cybersecurity-machineidentity-activity-7369739894459486208-wfjH)
- [Trusting autonomous machines, with a Keyfactor CSO quoted in Forbes](https://www.linkedin.com/posts/duncan-trawick_when-ai-acts-on-its-own-activity-7389307825300152320-MBba)
- [SolarWinds as a supply-chain lesson](https://www.linkedin.com/posts/duncan-trawick_solarwinds-how-russian-spies-hacked-the-activity-6767130247927250944-X2tT)
- [Automotive ransomware risk, quoted from CybelAngel via TechCrunch](https://www.linkedin.com/posts/duncan-trawick_volvo-had-some-rd-data-stolen-in-security-activity-6876542746228793344-qGrY)

## Brand relationships

- **Keyfactor** (employment)
- **CybelAngel** (mention)

## Partnerships

Duncan Trawick's posts show no public sponsorship or partnership program. They consistently promote employer and partner content: Keyfactor product and event posts (a PKI-as-a-Service award shortlist, a cryptography and crypto-agility webinar tied to Keyfactor's acquisitions of InfoSec Global and CipherInsights, a machine-identity blog link, and a Forbes article quoting Keyfactor's CSO), a certificate-lifespan industry update linking to a Keyfactor preparation page, a SolarWinds supply-chain post, and a CybelAngel automotive ransomware report referenced through TechCrunch. These read as company content amplification, not disclosed paid placements. There is no verified package to plan against, so buyers should discuss custom technical content or go-to-market work directly and ask about rates, format, booking, budget, exclusivity, approval, and disclosure terms.

## Alternatives

- Chaitanya Challa: Choose Chaitanya when the campaign needs to explain post-quantum migration across sectors and connected systems. One post moves from an executive order to the practical challenge of modernizing applications, operational technology, medical devices, hardware and supply chains without disrupting services. Another maps readiness from discovery and dependency mapping through risk prioritization, migration orchestration and continuous readiness. That breadth suits an ecosystem-level migration guide or executive-facing campaign more than a focused certificate-lifecycle explainer.
- Ben Volkow: Choose Ben when the campaign is specifically about turning federal post-quantum policy into an implementation plan. The posts identify practical blockers—funding, staffing, sector guidance, interoperable products and legacy or constrained environments—and lay out foundational actions such as cryptographic inventory, dependency mapping and governance. That makes Ben a closer choice for a federal-readiness or policy-to-execution campaign than Duncan's certificate-deadline and vendor-led demand-generation framing.
- Alex Wong: Choose Alex when the campaign needs evidence-led SSL market analysis to inform a go-to-market decision. The posts use figures from a European SSL report to show how market-share conclusions change when domain parking is separated from active business sites, and how renewal automation, platform partnerships and country-level differences affect commercial opportunity. That is a better match for market positioning or partnership strategy than Duncan's posts about certificate-lifespan change and crypto-agility promotion.

---
AI-assisted summary of public posts. Audience demographics are not available. Engagement appears only where we checked recent posts. Method: https://b2binfluencer.marketing/methodology/