iiinova — where your digital self keeps evolving

Todd H. Gardner @toddhgardner.com · 22/09/2026

We sell CT log search, and Google told us about our own subdomain takeover. Now we're in Japanese celebrity gossip. Wrote it up, including the alert we hadn't shipped yet.

110

Todd H. Gardner @toddhgardner.com · 01/07/2026

I have spent ten years building tools because certificates kept breaking things at the worst possible time. Talking through the 47-day shift on RunAs Radio reminded me how few people see it coming.

000

Todd H. Gardner @toddhgardner.com · 11/06/2026

I hate demo environments. They answer "does this work ideally" which is not your question. June 16 I'm doing the real thing live with Richard Hicks. Come watch.

000

Todd H. Gardner @toddhgardner.com · 22/05/2026

Hard to fake. An expert who's been doing web performance for a decade, switching tools and explaining exactly why. That's the kind of proof that actually means something.

021

Todd H. Gardner @toddhgardner.com · 22/05/2026

You have no idea how weird it gets. Folks have been putting this off for years, overwhelmed with other work. Building @certkit.io to help solve this problem.

010

Todd H. Gardner @toddhgardner.com · 20/05/2026

One of the first things a security audit asks for is an activity log. CertKit now has one. Every certificate action, logged, attributed, and flagged by importance.

000

Reposted by Todd H. Gardner

Request Metrics @requestmetrics.com · 20/05/2026

Web performance agencies bill by the hour. Every hour spent hunting a root cause is one not spent fixing. @eroan.bsky.social found a CLS cause in 10 minutes on his first day with Request Metrics. Pages, element, fix. #WebPerformance #CLS

031

Todd H. Gardner @toddhgardner.com · 08/05/2026

Every infra team has a folder called "cert scripts" with PowerShell nobody remembers writing. We built the thing that replaces it.

010

Todd H. Gardner @toddhgardner.com · 05/05/2026

That's exactly how we ended up building our own Certificate Lifecycle Management tool. www.certkit.io

100

Todd H. Gardner @toddhgardner.com · 05/05/2026

50 SSL certificates managed manually means 50 renewals a year today. Same team, same certs, in 2029: 400. I did the math in this post.

000

Todd H. Gardner @toddhgardner.com · 29/04/2026

I can probably help make those meetings go away forever. I'm building @certkit.io, let's chat.

000

Todd H. Gardner @toddhgardner.com · 29/04/2026

If you want to do this without paying enterprise IBM prices, check out @certkit.io

000

Todd H. Gardner @toddhgardner.com · 27/04/2026

Named a rule after myself. It felt right. Anyone who's been doing cert automation for a few years has accidentally built the thing I'm describing.

000

Todd H. Gardner @toddhgardner.com · 21/04/2026

Wow, almost done building a product that: Automates digital certificate lifecycle management... @certkit.io

000

Todd H. Gardner @toddhgardner.com · 17/04/2026

Shipped remote agent updates and Google Trust Store support in CertKit this week. Two features I've been wanting to get out the door for a while.

000

Todd H. Gardner @toddhgardner.com · 16/04/2026

Most engineers undervalue their time. You have more important work to do than re-inventing the wheel.

063

Todd H. Gardner @toddhgardner.com · 16/04/2026

"I could build that in a weekend" "That's just a md file in my AI"

000

Todd H. Gardner @toddhgardner.com · 13/04/2026

I spent a week on competitor websites before we launched. I couldn't figure out what a single one of them does. The security vendors selling you on "trust" are remarkably opaque.

001

Todd H. Gardner @toddhgardner.com · 08/04/2026

CertKit is out of beta today. After a year, 600+ beta users, and more Windows edge cases than I care to admit, it's a real product. www.toddhgardner.com/blog/certkit...

toddhgardner.com

CertKit is Out of Beta

Why I built a certificate management platform, what's wrong with the way we handle certs today, and why CertKit exists as a commercial product now.

010

Todd H. Gardner @toddhgardner.com · 02/04/2026

The sidecar pattern works but it's still one renewal process per container, which is the problem you're trying to get away from. A central system that pushes certs to pods is cleaner, and gets more important as lifetimes shrink. (I build certkit.io which does this)

certkit.io

CertKit SSL Certificate Lifecycle Management

SSL Certificate Lifecycle Management from CertKit handles the certificate tedium. Issue certificates in one click. Automatically deploy them to Linux, Windows, and vendor appliances. Monitor everythin...

010

Todd H. Gardner @toddhgardner.com · 02/04/2026

That quote nails it. cert-manager solves issuance really well but you still end up with no fleet-level view of what's expiring across namespaces. You find out when TLS starts failing, not before. You end up needing some other system to manage that, like @certkit.io

001

Todd H. Gardner @toddhgardner.com · 30/03/2026

Let's Encrypt quietly ran a mass revocation drill last week. 3 million real certificates. Most automation never noticed. That's the problem.

000

Todd H. Gardner @toddhgardner.com · 25/03/2026

For the orgs that asked: yes, you can now use CertKit without sending us your private keys. The keystore runs on your infrastructure. Keys never leave.

000

Todd H. Gardner @toddhgardner.com · 23/03/2026

The forums answer for deploying certs to multiple servers is always "just write a script." That script quietly becomes the most critical unmonitored piece of infrastructure you own.

000

Todd H. Gardner @toddhgardner.com · 16/03/2026

ARI is the protocol that makes mass revocation survivable. Most ACME clients aren’t using it right. Cron jobs don’t cut it when the CA needs a response in 6 hours.

001

Todd H. Gardner @toddhgardner.com · 11/03/2026

We added ARI so when a CA has to pull 83,000 certs overnight (hi DigiCert), it's just a quiet Tuesday. Certificate emergencies are getting boring.

000

Todd H. Gardner @toddhgardner.com · 09/03/2026

Renewed doesn't mean deployed. Certificate automation has a verification gap that almost nobody closes, and the consequences are getting worse as cert lifetimes shrink.

000

Todd H. Gardner @toddhgardner.com · 04/03/2026

Certificate expiration is a team problem that keeps getting assigned to one person. We just shipped the tools to fix that.

010

Todd H. Gardner @toddhgardner.com · 03/03/2026

GitHub felt more reliable when it was a pile of ruby on rails and a fistful of dreams.

030

Todd H. Gardner @toddhgardner.com · 02/03/2026

Get your last 1 year SSL certificates now, while the gettin is good.

010

Todd H. Gardner @toddhgardner.com · 26/02/2026

New post. AI code looks great in the diff and breaks on the first edge case. The instinct is to reverse-engineer the author's assumptions, but that approach is slow and usually wrong.

220

Todd H. Gardner @toddhgardner.com · 25/02/2026

If you’re still treating cert renewals like a calendar reminder, March is gonna be spicy.

000

Todd H. Gardner @toddhgardner.com · 23/02/2026

This is one of my favorite cybersecurity posts we've done. I dug into the data on MITM attacks and the threat model most of us worry about is basically fiction.

020

Reposted by Todd H. Gardner

KAL @blueflafighter.bsky.social · 23/02/2026

The ICE surge in Minnesota cost $280M, to detain 4k people of whom only 30 were accused of violent crimes. $9 million per capture of the "worst of the worst". Plus two citizens murdered. ~ Veterans for Peace

12246002078

Todd H. Gardner @toddhgardner.com · 19/02/2026

I keep seeing AI-generated diffs that are plausible and wrong in the most annoying ways: missing guards, cargo-cult hooks, swallowed promises. If your review is vibes, you’re gambling. Production has receipts.

000

Todd H. Gardner @toddhgardner.com · 19/02/2026

Sorry to hear that. Tough times, but you’ll get through it.

100

Todd H. Gardner @toddhgardner.com · 17/02/2026

My first published software was part of a level pack for Duke Nukem.

010

Reposted by Todd H. Gardner

NY Times Pitchbot @nytpitchbot.bsky.social · 16/02/2026

We wanted to understand how rugged English-Scots-Irish culture has shaped America. So we talked to three white South African billionaires at a sex party in the Bahamas.

302600515

Todd H. Gardner @toddhgardner.com · 16/02/2026

BygoneSSL isn't theoretical. We found a valid certificate on our own domain, issued to someone we've never met. Getting it revoked was an experience.

010

Todd H. Gardner @toddhgardner.com · 15/02/2026

“Go to sleep with itchy butt, wake up with stinky finger” This game was such a gem for teenage todd 🤣

010

Todd H. Gardner @toddhgardner.com · 15/02/2026

It’s weird to see people who aren’t from Minnesota talking about Minnesota.

010

Todd H. Gardner @toddhgardner.com · 15/02/2026

We also have amazing Somali and Hmong populations. The best part of this country is the melding pot of culture. If he wants English-Scott-Irish, then he should move to England, Scotland, or Ireland.

010

Reposted by Todd H. Gardner

NDC Conferences @ndcconferences.com · 14/02/2026

📢 Attention Software Developers! The #EarlyBird ticket offer for NDC Toronto closes this Monday, Feb 16th 🇨🇦 Join @stevesanderson.bsky.social and 55 other industry experts for 4 days of learning, networking, and fun! Secure your spot 👉 ndctoronto.com

022

Reposted by Todd H. Gardner

Request Metrics @requestmetrics.com · 13/02/2026

Your Speed Index is bad but the page looks fine? Lighthouse records a video of your page loading and scores how fast the viewport fills in. Not just the first pixel, the whole visual experience. requestmetrics.com/web-performa... #WebPerf

requestmetrics.com

Understanding Lighthouse: Speed Index

Lighthouse says: "Speed Index shows how quickly the contents of a page are visibly populated." It sounds simple. It is not. Here's what it actu...

031