Indeed Certificate Manager 7.3 Adds OpenLDAP, Dogtag CA and Linux Domain Support
Company Indeed has released Indeed Certificate Manager 7.3, the latest version of its centralized certificate and key media management system. The primary focus of the update is Linux infrastructure, with the product gaining support for additional directories, an open certificate authority, and single sign-on via Kerberos.
Indeed CM now works with OpenLDAP and Alt Domain. This enables organizations to deploy PKI infrastructure entirely within Linux environments and avoid vendor lock-in for core directory services.
Another significant integration is Dogtag CA. The open-source certificate authority can now be used together with Indeed CM for issuing and managing the full certificate lifecycle. Administrators no longer need to handle the low-level cryptographic operations directly, as the system manages these tasks.
For access to Indeed CM services on Linux, Kerberos SSO has been implemented. Once a user authenticates to the domain, no additional credentials are required, reducing the number of passwords that must be remembered and lowering phishing risk.
Certificate protection has also been strengthened. Version 7.3 supports Rutoken BIO and three-factor authentication combining a hardware token, PIN code, and fingerprint. In integration with Rutoken Logon, a complex password scenario has been added where the password is automatically generated and stored on the token.
Additional features include storage of service notes about users and the ability to issue service certificates for client agents through SafeTech CA. The list of supported hardware now includes new JaCarta models.
Indeed CM 7.3 adds support for Windows Server 2025, Debian 13, and Alt 11, while remaining compatible with ALD Pro 3.0.
Related articles
Russian AI Research Ranks High in Global Science but Struggles with Commercialization
Russia has secured third place among BRICS nations and twentieth worldwide in the number of scientific papers presented at ten leading international conferences on machine learning and artificial intelligence. According to a study by the Scientometric Center of HSE University, Russian organizations contributed 560 papers between 2020 and 2025 that received over 12,300 citations. The average international citation rate reached 3.59, surpassing India despite fewer total publications. Russian strengths are most evident in the mathematics of machine learning, optimization, and formal concept analysis, with notable results also in computer vision and speech technologies. More than 40 percent of domestic publications involve business participation, led by Yandex among companies, HSE University and Skoltech among universities, and AIRI among non-profit organizations. Significant barriers remain, including shortages of computing power, limited access to high-quality data, and weak transfer of research into commercial products, particularly in natural language processing, AI agents, and infrastructure technologies. The Ministry of Digital Development has announced plans to stimulate demand for domestic AI solutions, expand computing infrastructure, improve regulation, and accelerate the implementation of scientific developments.
redb.Identity Deploys Three-Layer Defense to Neutralize Stolen Access Tokens in OpenID Connect
redb.Identity, a custom OAuth 2.1 and OpenID Connect provider built on .NET, addresses the inherent risks of bearer access tokens by implementing three distinct protection layers. The first layer uses a Backend-for-Frontend pattern with Blazor Server and HttpOnly cookies to ensure no tokens ever reach the browser. The second layer applies DPoP proof-of-possession binding so that a stolen token remains useless without the corresponding private key. The third layer provides rapid revocation through RFC 7009 endpoints, refresh token rotation, idle timeouts, and a hybrid push-pull backchannel logout mechanism that guarantees no revocation is lost across replicas. The architecture also mitigates XSS vectors from direct application code, compromised npm dependencies, browser extensions, and localStorage. Additional routine controls include constant-time secret comparison, TOTP replay protection, rate limiting at multiple scopes, and sanitized proxy headers. The design explicitly acknowledges that BFF shifts rather than eliminates risk, requiring complementary CSRF protection via SameSite cookies and antiforgery tokens.
Russia Weighs Mandatory Use of Sovereign AI Models Like GigaChat in Government Sectors
Russian authorities are discussing a draft government resolution that would require state bodies and companies to prioritize fully domestic AI models in multiple regulated areas even when they cost up to 50 percent more than alternatives. Only GigaChat developed by Sber currently meets the proposed sovereign criteria of being created by a Russian legal entity and running exclusively on Russian infrastructure. National models such as Yandex’s Alice AI would be allowed to incorporate open-source components. The measure would apply to law-making, national projects, taxes, customs, critical information infrastructure, education, healthcare and Gosuslugi services. The Ministry of Digital Development stresses that the list remains preliminary and open to further input from market participants. Industry players including Yandex and MWS AI have voiced concerns over reduced choice and potential quality or cost disadvantages for end users.
GTA: Vice City Runs Natively in Browser via reVC Port, Supports Smartphones and High Frame Rates
A browser-based version of the 2002 classic GTA: Vice City has been made available on the Quenq website, allowing play without any client installation on both desktop computers and mobile devices. The port supports keyboard, gamepad, and touch controls while offering save management, mod support, cheat code entry, and frame rate customization. Testing on an OnePlus 12 smartphone showed smooth performance in both landscape and portrait orientations. The implementation relies on the reVC decompilation project combined with WebAssembly for C++ execution and WebGL 2 for graphics acceleration. On desktop hardware the game can exceed 100 FPS, far above the original 30 FPS target, which can affect physics behavior. The site also hosts a similar GTA III port based on re3, with traces of the earlier DOS Zone project visible in the pause menu. Previous DMCA action by Take-Two in 2025 temporarily shut down the service, yet the versions remain accessible despite ongoing copyright concerns.