He/him
sometimes covers security here. His latest such thread was (mostly) about Certificate Authorities.