Duncan Trawick shares cybersecurity content on PKI and digital trust, including certificate management, post-quantum readiness, supply-chain security, and machine identity for AI systems. Their posts also discuss Keyfactor products and company content.
Autonomous AI is framed as reason to strengthen machine identity, with PKI as existing layer.
Check first: Confirm recent impressions, unique viewers, follower growth, per-post performance, and audience job function data.
Main ideas
Certificate lifespans are collapsing, making automation essential · Crypto-agility starts with seeing what you already run · Autonomous AI needs machine identity, and PKI is the layer that already exists
Duncan Trawick shares cybersecurity content focused on PKI, digital trust, certificate management, post-quantum readiness, supply-chain security, and machine identity for AI systems.
Their posts often connect a security change or emerging risk to practical implications: for example, they link shorter TLS certificate lifespans to the need for automated discovery and lifecycle management, and frame autonomous AI as a reason to strengthen machine identity.
Follow their posts for concise pointers to developments and outside explainers in these areas; many promote or summarize Keyfactor material.
The clearest strength is turning cybersecurity developments into timely, concrete hooks.
The certificate-lifespan post gives a policy change and target date, then connects them to automation and post-quantum planning.
Posts about AI use questions around autonomous systems to make machine identity and PKI relevant without presenting them as entirely new problems.
Duncan also amplifies outside material, including a TechCrunch-cited automotive report and a 60 Minutes segment on SolarWinds.
These posts point readers toward useful context but rely on linked sources rather than offering much analysis of their own.
A PKI-as-a-Service awards post is a company-news exception, not an explanatory example.
Across seven LinkedIn posts, Duncan Trawick returns to one argument: trust in digital systems is only as strong as the cryptographic identity underneath it—certificates, keys, and PKI—and that layer faces pressure from three directions.
Read more
Public certificate lifespans are being cut sharply; quantum migration sets a hard deadline for knowing where every key and certificate lives; and AI agents that act on their own need provable identity before anyone can hold them accountable.
A separate thread treats supply-chain exposure as a recurring failure mode: an attack on one trusted partner can compromise everyone downstream.
The posts are usually short, often forwarding a report, webinar, award, or article rather than offering extended technical instruction, so they reveal priorities and framing.
Certificate lifespans are collapsing, making automation essential
Duncan Trawick's clearest original argument is that a standards decision turns certificate management into a deadline problem, not a hygiene chore.
Read more
Publicly trusted SSL/TLS certificates will have to be replaced far more often, making automation essential for discovery, inventory, and lifecycle management. The post also links this change to the industry's move toward post-quantum cryptography by 2030, treating certificate automation and quantum readiness as one planning problem.
The post reports that the CAB Forum approved Apple's proposal to cut the maximum lifespan of publicly trusted SSL/TLS certificates from 398 days to 47 days by 2029.
A review period still stands, but the outcome is described as all but inevitable.
The post argues this "underscores the growing need for automation in certificate discovery, inventory, and lifecycle management" and points to Keyfactor guidance on preparing.
Crypto-agility starts with seeing what you already run
A second recurring position is that organisations cannot plan a quantum-safe transition until they can find and fix the cryptography already in production.
Read more
Cryptographic visibility and control come first; the migration timeline follows. Rather than framing agility as a future swap of algorithms, the argument puts invention and vulnerability-finding first, making vendor tooling useful to buyers—and the InfoSec Global and CipherInsights acquisitions relevant to them.
A post promoting a Keyfactor webinar spells out the learning outcomes: how to uncover and fix cryptographic vulnerabilities, steps to ensure a seamless quantum-safe transition, and what the expanded product stack means for a crypto strategy. The webinar also explains the InfoSec Global and CipherInsights acquisitions, which the post calls "a game-changer for organizations that need to scale crypto-agility."
Autonomous AI needs machine identity, and PKI is the layer that already exists
The argument is that autonomous systems create an accountability gap before they create a new security category.
Read more
When agents make decisions on behalf of enterprises, operate inside connected environments, and lack encryption and mature identity frameworks, trust becomes an identity question, not a model question.
The conclusion is conservative rather than disruptive: the foundations of digital trust do not need replacing; they need to extend to cover machines.
Keyfactor CSO Chris Hickman makes the supporting case in a Forbes article; Duncan Trawick frames it with the surrounding questions.
One post consists entirely of questions: what happens when agentic AI starts making decisions on our behalf, when enterprises and connected IoT environments depend on those agents at scale, when most AI systems still lack encryption and mature identity frameworks, and when threat actors ask the same questions.
Another opens with "How do we trust machines that act on their own?"
It quotes Chris Hickman saying the foundation of digital trust does not need to be reinvented but must evolve, with proven cryptography such as PKI keeping autonomous systems accountable.
Both posts follow the same pattern: questions first, then a named authority or product source. The second shifts from asking a question to anchoring the answer in a quoted executive and an external publication, backing the position that PKI is a foundation.
The trusted partner is the weakest link in the chain
A recurring priority is that exposure comes through suppliers, not direct attacks on the target.
Read more
Both posts on this theme amplify someone else's investigation rather than describing the technical mechanics: a television segment in one case, a sector research report relayed through technology press in the other. The consistent claim is that a single compromised or careless partner can carry risk across an entire supply chain.
One post points to the SolarWinds 60 Minutes special, which shows how "a vulnerability with any trusted partner can expose an entire supply chain."
The other quotes a TechCrunch article about a CybelAngel automotive report.
A six-month investigation found sensitive information leaked from automotive companies—trade secrets, personally identifiable information, blueprints of engines and production facilities, confidential agreements, and HR documents—and attributed the leaks to internal threats and external security weaknesses across the automotive supply chain.
The earlier-style SolarWinds post offers almost no framing beyond hashtags and assumes readers know the breach.
The automotive post is more specific: it quotes the alarming details verbatim, names the research firm and publication, and links to the article.
Both posts borrow credibility from named sources rather than summarising the material in the poster's own words.
Industry recognition and product milestones show that a problem is real
A steady format turns company news into a signal about the market.
Read more
Awards, webinars, and acquisitions are presented not as announcements to celebrate but as proof of demand for scalable PKI and crypto management. This is the most promotional thread in the set, showing what Duncan Trawick chooses to put their name behind: capability claims tied to a named problem, rather than product features in isolation.
A post notes that Keyfactor's PKI-as-a-Service has been shortlisted for Best SaaS Solution in the SC Awards Europe, calls the recognition a testament to the work behind "secure, scalable PKI solutions," and links to more information. The webinar and acquisition posts follow the same pattern: a milestone, a learning promise, and a link.
Explains what is changing in certificate lifecycle management and when.
Read more
A clear starting point on the policy shift most likely to change how a PKI team plans automation.
Duncan Trawick reports that the CAB Forum approved Apple's proposal to reduce the maximum lifespan of publicly trusted SSL/TLS certificates from 398 days to 47 days by 2029.
The proposal is still under review, but they call the change all but inevitable.
The post connects the shift to the industry's move toward post-quantum cryptography by 2030 and the need to automate certificate discovery, inventory and lifecycle management, then points to Keyfactor material on preparing for it.
For brands planning a campaign
A strong hook for a demand-generation asset on certificate automation: a deadline-driven reason to discuss discovery and inventory, not abstract PKI hygiene, tied to the post-quantum timeline.
Explains why cryptographic visibility and control have become urgent, and how the acquisition of InfoSec Global and CipherInsights is being presented to buyers.
Read more
Duncan Trawick promotes a Keyfactor webinar on cryptographic visibility and control, using the event to introduce the company's acquisition of InfoSec Global and CipherInsights.
The post lists three learning outcomes: uncovering and fixing cryptographic vulnerabilities, steps toward a quantum-safe transition, and what the expanded product stack means for a crypto strategy.
It also offers the on-demand session to readers who cannot attend live.
For brands planning a campaign
A template for event-led demand generation: lead with a customer problem, connect it to a product change, offer three concrete takeaways, then lower the barrier to attendance. Reusable for a launch or webinar asset aimed at security architects.
Explains what breaks when AI agents act autonomously at enterprise scale, and why machine identity is a PKI problem rather than a new category.
Read more
The post poses a series of questions: What happens when agentic AI starts making decisions on our behalf, when enterprises and even connected IoT environments depend on those agents at scale, when most AI systems still lack encryption and mature identity frameworks, and when threat actors ask the same questions? It then points readers to a Keyfactor blog on the subject.
For brands planning a campaign
Strong framing for an upper-funnel piece aimed at AI and identity audiences: a sequence of questions makes the risk feel immediate before naming a product, while positioning PKI as the existing foundation.
Explains how established cryptography such as PKI is being positioned as the accountability layer for autonomous systems.
Read more
Duncan Trawick asks how we trust machines that act on their own, then quotes Keyfactor CSO Chris Hickman from a Forbes article: the foundation of digital trust does not need to be reinvented; it needs to evolve, and proven cryptography such as PKI keeps autonomous systems accountable and secure. The post names the source and links to the article.
For brands planning a campaign
Shows how a short post can draw authority from a named executive and an external publication. For a go-to-market brief, it supports a no-rip-and-replace message for teams that already run PKI.
Explains how a vulnerability in a trusted partner can expose an entire supply chain, and shows what Trawick amplifies.
Read more
Duncan Trawick points to the SolarWinds 60 Minutes special, saying it showed how a vulnerability at any trusted partner can expose an entire supply chain. The post assumes readers know the breach and directs them to the external segment.
For brands planning a campaign
A useful reference point for which third-party explainers Duncan Trawick amplifies, relevant to content or social plans that need supply-chain coverage.
Explains which sectors are being warned about credential leakage, and how a research report gets amplified through a technology publication.
Read more
The post quotes a TechCrunch article about a CybelAngel report on automotive ransomware risk.
The quoted passage says a six-month investigation found highly sensitive information leaked from automotive companies, including trade secrets, personally identifiable information, engine and production-facility blueprints, confidential agreements and HR documents.
It attributes the leaks to internal threats and external weaknesses across the automotive supply chain.
The post credits both the research firm and the publication and links out.
For brands planning a campaign
A report-amplification format: choose a sector study, quote its alarming specifics verbatim, and let the original publisher carry the credibility. For demand generation, it models vertical content for automotive or manufacturing security buyers.
Certificate lifecycle management and PKI operations2
Post-quantum readiness and crypto-agility2
Supply-chain risk and third-party exposure2
Machine identity and trust in agentic AI2
Certificate lifecycle management and PKI operations
Several posts frame public certificate management as an operational risk and preparation challenge.
Read more
One says the CAB Forum approved Apple’s proposal to reduce the maximum lifespan of publicly trusted SSL/TLS certificates from 398 days to 47 days by 2029, making automation for certificate discovery, inventory, and lifecycle management urgent. Another presents Keyfactor’s PKI-as-a-Service shortlist in the SC Awards Europe as a sign of demand for scalable PKI.
Connects standards changes and industry recognition to the practical work of certificate automation.
For brands planning a campaign
A PKI or digital trust brief can ask Duncan Trawick to turn certificate lifespan changes into developer-facing explainers, migration checklists, and lifecycle automation demos—not broad cybersecurity commentary.
Posts promote a Keyfactor webinar on cryptographic visibility and control, tied to Keyfactor’s acquisition of InfoSec Global and CipherInsights.
Read more
Stated learning outcomes include finding cryptographic vulnerabilities, ensuring a quantum-safe transition, and understanding an expanded solution stack for crypto strategy. Another post links shorter certificate lifespans to the industry’s move toward post-quantum cryptography by 2030.
Uses industry deadlines and acquisition news to frame quantum readiness as an urgent planning and visibility challenge.
For brands planning a campaign
Useful for demand-generation assets such as PQC readiness assessments, crypto-inventory workshops, migration roadmaps, and on-demand webinar follow-ups for security and platform teams.
Two posts use named incidents and reports to show how trusted partners and supply-chain weaknesses create exposure.
Read more
One cites the SolarWinds 60 Minutes special to show how a vulnerability in any trusted partner can expose an entire supply chain. The other relays a CybelAngel automotive report via TechCrunch, describing exposed credentials, leaked trade secrets, blueprints, confidential agreements, and HR documents across automotive companies and their supply chains.
Anchors supply-chain risk in concrete breach narratives and sector-specific findings.
For brands planning a campaign
A security vendor can evaluate Duncan Trawick for incident-led content that turns third-party risk into sector-specific buyer education, supplier assessment prompts, and executive- or developer-facing risk explainers.
Posts ask what happens when agentic AI makes decisions, enterprises and IoT environments depend on agents at scale, and AI systems lack encryption and mature identity frameworks.
Read more
One points to a Keyfactor blog on these questions; another cites Keyfactor CSO Chris Hickman in Forbes, arguing that digital trust foundations need to evolve and that proven cryptography such as PKI remains critical to keeping autonomous systems accountable.
Frames AI trust through operational questions, then presents established PKI as the grounding layer.
For brands planning a campaign
Strong fit for content that explains machine identity, AI agent accountability, and PKI foundations to developers and security architects, including explainers, architecture notes, and demand-generation assets around autonomous systems.
A recurring format is short promotional or news-sharing posts: a Keyfactor PKIaaS award shortlist, a webinar with a registration link, an acquisition update, and links to reports or articles.
Read more
Each combines a news hook with a learning promise and a call to register, read, or learn more.
Turns company milestones, awards, and webinars into educational hooks rather than dry announcements.
The posts are short LinkedIn updates, demonstrating topic selection and framing more than long-form technical instruction. If a campaign requires sustained tutorials or documentation, ask for relevant samples.
For brands planning a campaign
A brand can assess whether Duncan Trawick can carry product and event messaging into topic-led posts, then pair that social distribution with deeper technical assets on PKI, quantum, and machine identity.
Trawick's posts show one clear company tie: they write about Keyfactor in the first person, calling it a team they are part of and using "we" for its work, and repeatedly promote Keyfactor products, webinars, and blog content.
Read more
The only other business named is CybelAngel, shared in 2021 in a third-party report on automotive ransomware risk. A 2021 SolarWinds post discusses that breach as a supply-chain lesson rather than a brand relationship.
Keyfactor
Employment · 2025-04-10
Trawick's posts present Keyfactor as their own team.
Read more
An April 2025 post about Keyfactor's PKI-as-a-Service being shortlisted for an SC Awards Europe honor says they are "proud to be part of this team," and another post from the same month uses "we" to describe Keyfactor's work helping organizations prepare for shorter certificate lifespans.
Their other posts promote a Keyfactor webinar on crypto-agility, the company's acquisition of InfoSec Global and CipherInsights, a Keyfactor blog post on agentic AI and machine identity, and a Keyfactor executive quoted in Forbes about trusting autonomous systems.
For a role-specific assessment, ask for their job title.
Shares CybelAngel's automotive-industry risk report, covered by TechCrunch, which found hundreds of thousands of exposed credentials and leaked material such as engine and production-facility blueprints and confidential agreements across automotive supply chains.
Read more
The post cites the report's findings and links the coverage. Ask whether they have a relationship with CybelAngel.
Duncan T. posts on LinkedIn about the cryptographic layer underpinning digital trust: public certificate lifespans, PKI and certificate lifecycle automation, post-quantum migration, crypto-agility, and machine identity for AI agents.
Read more
Start with the certificate-lifespan and PKI operations posts, follow the post-quantum and crypto-agility thread, then read the agentic AI and machine identity items for the newer direction.
Supply-chain exposure posts show a separate recurring concern.
Most posts are short: they share a standards decision, webinar, award, breach report, or article, then add brief framing rather than a long tutorial.
Use them to track recurring priorities and industry signals, not for step-by-step technical instruction.
Focuses on post-quantum cryptography and crypto-agility as an operational migration problem, covering dependency mapping, third-party readiness, and continuous readiness.
Read more
Like Duncan, Chaitanya connects PQC to systems beyond the organisation’s own estate and presents crypto-agility as the practical response.
Chaitanya develops longer first-person industry analysis across banking, healthcare, critical infrastructure, and national security. Duncan’s posts are shorter and more often tied to Keyfactor product, webinar, and award updates, with machine identity and agentic AI as a distinct thread.
Covers post-quantum readiness, crypto-agility, cryptographic discovery and inventory, CBOMs, and migration execution.
Read more
Both treat quantum readiness as an operational and procurement priority rather than a research topic.
Ben frames the work around QIZ’s discovery, CBOM, and readiness services, with federal executive orders and G7/CISA pressure as the main drivers. Duncan’s posts centre on Keyfactor’s certificate lifecycle, PKI, and digital trust messaging, and extend into AI machine identity.
Analyzes SSL certificates, certificate automation, and the shifting certificate-authority market in Europe.
Read more
Both discuss how shorter certificate cycles and automation change the practical work of managing public certificates.
Alex publishes data-heavy market analysis from an original State of SSL report, including findings on market share, DNSSEC, Let’s Encrypt, eIDAS, and QWAC. Duncan’s posts share company news and shorter commentary rather than leading with original dataset analysis.
Placement read: a small, topically concentrated professional channel with a LinkedIn following of 1,202, recorded 9 October 2026.
Read more
Duncan Trawick’s posts consistently address cybersecurity professionals: the CAB Forum decision to cut public certificate lifespans toward 47 days by 2029, a PKI-as-a-service award shortlist, crypto-agility and post-quantum migration, the SolarWinds supply-chain breach, and machine identity for autonomous AI agents.
For a campaign aimed at PKI and digital-trust practitioners, the subject matter is relevant to people already in the field; the channel’s value for reaching developers or budget-holding decision-makers is unproven.
Ask Trawick for recent impressions, unique viewers, follower growth, per-post performance and a format breakdown for comparable certificate lifecycle, PKI-as-a-service and post-quantum posts, plus an audience survey or documented source covering job function, employer type and seniority.
Without that evidence, treat reach and demand-generation targets as unset rather than small.
Duncan Trawick's posts show no public sponsorship or partnership program.
Read more
They consistently promote employer and partner content: Keyfactor product and event posts (a PKI-as-a-Service award shortlist, a cryptography and crypto-agility webinar tied to Keyfactor's acquisitions of InfoSec Global and CipherInsights, a machine-identity blog link, and a Forbes article quoting Keyfactor's CSO), a certificate-lifespan industry update linking to a Keyfactor preparation page, a SolarWinds supply-chain post, and a CybelAngel automotive ransomware report referenced through TechCrunch.
These read as company content amplification, not disclosed paid placements.
There is no verified package to plan against, so buyers should discuss custom technical content or go-to-market work directly and ask about rates, format, booking, budget, exclusivity, approval, and disclosure terms.
A cybersecurity software company wants a PKI and digital trust expert to create technical content and go-to-market materials, translating certificate lifecycle and post-quantum migration trends into developer-friendly guidance and demand-generation assets.
Read more
Reasons
Duncan Trawick turns policy changes into concrete consequences. The certificate-lifespan post reports that the CAB Forum approved Apple's proposal to cut the maximum lifespan of publicly trusted SSL/TLS certificates from 398 days to 47 days by 2029, notes that a review period remains, then names the work required: automation in certificate discovery, inventory and lifecycle management. It reads like a migration explainer, not a news repost.
The same approach carries over to quantum planning. Both the lifespan post and the crypto-agility webinar post put a date on the problem (post-quantum by 2030) and offer three stated takeaways: find and fix cryptographic vulnerabilities, take steps toward a quantum-safe transition, and understand what a widened product stack means for crypto strategy. For demand generation, that is a ready-made asset outline with a deadline attached.
The webinar post offers a proven event-promotion structure: it leads with the customer problem, ties it to a company change (the InfoSec Global and CipherInsights acquisitions), lists what attendees will learn, and removes the attendance barrier by offering the on-demand session. The structure can be reused for a launch, assessment or workshop asset.
The framing suits upper-funnel developer and architect content. The agentic-AI post builds a chain of questions — what happens when AI agents decide on our behalf, when enterprises and IoT environments depend on them at scale, when AI systems lack encryption and mature identity frameworks, and when threat actors ask the same questions — before naming a product. It positions machine identity as an extension of existing PKI rather than a new category.
Third-party claims are credited, not borrowed silently: the automotive report is attributed to CybelAngel through TechCrunch, the executive argument to a named Keyfactor CSO via Forbes, and the certificate post links to the actual voting results. A vendor brief seeking credible amplification with attribution gets that here.
The messaging is vendor-aligned without overreaching. Quoting the CSO's line that digital trust does not need to be reinvented, only evolved, keeps established PKI as the answer. That supports a no-rip-and-replace position for teams that already run certificate infrastructure.
Set practical boundaries in the engagement: the posts show no long-form bylined article, video or transcript, so test sustained tutorial or documentation work with one paid sample before scoping a program. The only audience figure is a LinkedIn following of 1,202 people, observed 9 October 2026, with no data on follower profiles; set reach targets against asset performance, not an assumed developer audience. No published rate card or sponsorship package appears, so agree fees, exclusivity and disclosure terms directly.
Verdict
Fit, with a scope boundary. The posts show a repeatable way to turn a standards deadline into an operational problem and a reason to act — the core of this campaign. Longer-form developer guidance remains untested, so make that the focus of a paid pilot rather than assume it.
When to choose a specialist
A consumer VPN brand wants a paid, clearly disclosed three-part video series plus affiliate promotion aimed at a mainstream, non-technical audience of 500,000 or more. The brief requires independent head-to-head comparisons that name competitors and their weaknesses, booked at published fixed rate-card tiers.
Read more
Reasons
The posts are short written LinkedIn posts; they offer no video, audio, livestream or transcript to assess against the proposed three-part video series.
The writing targets people already working in cybersecurity. Certificate lifespans, crypto-agility, PKI-as-a-service, machine identity and supply-chain exposure all assume a practitioner or security-adjacent reader. Nothing reviewed targets non-technical consumers, and the only available traffic figure is the LinkedIn count of 1,202 followers — not enough to support a 500,000-reach promise.
The posture is vendor-side. The posts promote an employer's products, acquisitions, award shortlist, webinar and blog, and amplify the employer's own chief security officer. A campaign requiring independent head-to-head criticism of named competitors runs against that pattern; the author's own channel has not shown this kind of content.
The commercial structure is undocumented: no media kit, sponsorship page, rate card or partnership inquiry route appears in the posts. Published fixed tiers therefore cannot be planned against; any deal would require custom negotiation.
The posts show no affiliate or link-monetisation activity. Links point to the employer's preparation pages, webinar registration and third-party articles — content distribution rather than paid referral traffic.
A vendor-side brief for security practitioners could use the same person for explainers, checklist assets, webinar promotion or follow-up email copy under custom-negotiated terms. That is a different brief, not a reduced version of this one.
Verdict
Poor fit on the available information. The campaign calls for a different format, reader, posture toward vendors and commercial structure from what the posts show. The commercial structure is undocumented.
A worked campaign example
Angle
Lead with the shrinking certificate lifespan and automation as the response, then extend the argument to post-quantum readiness. That makes certificate work the first practical step in the quantum plan, not a separate maintenance chore.
Assets
A deadline explainer should state the change plainly: publicly trusted SSL/TLS certificate lifespans are heading from 398 days to 47 days by 2029 under Apple's approved CAB Forum proposal. Keep the source post's honest two-line caveat that a review period remains. End on the operational consequence: automated discovery, inventory and lifecycle management stop being optional.
A migration checklist for platform and security teams, ordered around the certificate post's own sequence: discovery, inventory, lifecycle automation. Make each step answerable: what do you hold, where is it, who renews it, and what breaks at 47 days?
A webinar or workshop landing page can follow the crypto-agility event's structure: open with the customer problem, attach the product or service change, list three concrete takeaways, and offer an on-demand recording. Carry through the three promises Duncan Trawick already writes comfortably: find and fix cryptographic vulnerabilities, take a credible step toward a quantum-safe transition, and explain what the expanded offering means for the reader's crypto strategy.
Two or three promotion posts in the author's own voice, including a question-led opener like the agentic-AI post, aimed at security architects who already run certificate infrastructure rather than newcomers.
A short follow-up piece connecting certificate automation to post-quantum migration, using the 2030 quantum target as the horizon and the 2029 certificate deadline as the nearer forcing function.
A vendor-voice option for audiences where a no-rip-and-replace message matters to an installed base. Keep existing PKI as the answer, not a replacement, using the argument already made by quoting the CSO's line that digital trust needs to evolve, not be reinvented.
Brief
The PKI and digital trust content brief: build developer-friendly guidance and demand-generation assets around certificate lifecycle change and post-quantum migration.
Why this should work
This angle builds on the writer’s strongest documented pattern: take a dated standards change, spell out the operational work it requires, add numbered learning outcomes, and make attendance or download easy. It also uses evidence: the voting results are linked, third-party claims are credited to CybelAngel, TechCrunch and Forbes, and the uncertain review period is stated. Pilot one explainer and one developer-facing asset, and judge success by asset engagement, registrations and downloads—not by an assumed large developer following. Ask for a long-form sample before proceeding; no such sample is documented. Negotiate fees, usage and disclosure directly, since no published package is documented.
Choose Chaitanya when the campaign needs to explain post-quantum migration across sectors and connected systems.
Read more
One post moves from an executive order to the practical challenge of modernizing applications, operational technology, medical devices, hardware and supply chains without disrupting services.
Another maps readiness from discovery and dependency mapping through risk prioritization, migration orchestration and continuous readiness.
That breadth suits an ecosystem-level migration guide or executive-facing campaign more than a focused certificate-lifecycle explainer.
Duncan T.'s posts offer a broad migration framework, but do not cover the certificate-renewal and lifecycle-management angle or provide a worked developer tutorial. Ask for confirmation of identity and fit before commissioning.
Choose Ben when the campaign is specifically about turning federal post-quantum policy into an implementation plan.
Read more
The posts identify practical blockers—funding, staffing, sector guidance, interoperable products and legacy or constrained environments—and lay out foundational actions such as cryptographic inventory, dependency mapping and governance. That makes Ben a closer choice for a federal-readiness or policy-to-execution campaign than Duncan's certificate-deadline and vendor-led demand-generation framing.
The examples emphasize policy, procurement and organizational readiness rather than certificate lifecycle changes or developer-friendly guidance. Ask for a detailed technical tutorial and confirmation of identity and fit before commissioning.
Choose Alex when the campaign needs evidence-led SSL market analysis to inform a go-to-market decision.
Read more
The posts use figures from a European SSL report to show how market-share conclusions change when domain parking is separated from active business sites, and how renewal automation, platform partnerships and country-level differences affect commercial opportunity. That is a better match for market positioning or partnership strategy than Duncan's posts about certificate-lifespan change and crypto-agility promotion.
The examples focus on market structure and commercial implications, not a practical guide to certificate operations or post-quantum migration. Ask for the underlying report's methodology and confirmation of identity and fit before commissioning.
Duncan T.'s LinkedIn posts here include seven posts published between February 2021 and October 2025.
They cover a CAB Forum decision to cut the maximum lifespan of publicly trusted SSL/TLS certificates, a webinar on cryptographic visibility tied to the InfoSec Global and CipherInsights acquisitions, a PKI-as-a-Service award shortlist, agentic AI and machine identity, a Keyfactor executive quoted in a Forbes article, the SolarWinds supply-chain breach, and an automotive ransomware report relayed through TechCrunch.
Several posts are short shares of third-party reports or company milestones, so they show topic selection and framing more than extended original teaching.
Claims and views from others, such as the chief security officer quoted in Forbes or the CybelAngel findings carried by TechCrunch, are identified as third-party material.
Duncan T.'s posts do not include any long-form bylined article, video, livestream, or transcript; they do not show a job title beyond what the posts themselves state.
The posts also do not establish audience composition beyond a LinkedIn follower count of 1,202 observed 9 October 2026, or publish any sponsorship or partnership terms.
These are gaps a reader should know about before relying on this page.