WP Briefing: Episode 83: Learning Pathways

Discover how Learning Pathways can guide you through your WordPress journey with clarity and purpose. In the latest episode of WordPress Briefing, host Josepha Haden Chomphosy welcomes special guest Wes Theron to discuss the newly introduced Learning Pathways. These curated lesson sets are tailored to various experience levels, roles, and use cases, ensuring a personalized learning experience for every WordPress user.
Wordpress

Demystify history with GitHub Copilot commit explanations

Have you ever struggled to understand what a commit was doing or why it was made? Do you wish you had more clarity and context when reviewing or collaborating on code changes? If you answered yes, then you’ll love what GitHub Copilot can do for you: generate commit explanations.
The post Demystify history with GitHub Copilot commit explanations appeared first on Visual Studio Blog.
Microsoft

8 Best Lead Magnet Tools to Skyrocket Conversions (Compared)

At WPBeginner, we’ve been using different types of lead magnets for over a decade now to get readers to subscribe to our email list. So far, we have built lead magnets like ebooks, free tools, giveaways, checklists, and a lot more. We have also used… Read More »
The post 8 Best Lead Magnet Tools to Skyrocket Conversions (Compared) first appeared on WPBeginner.
Wordpress

WPBeginner Turns 15 Years Old – Reflections, Updates, and a Giveaway ($50,000 in Prizes)

It’s quite surreal to type that WPBeginner turns 15 years old today! Time flies when you’re having fun especially with such an amazing community of website owners, small businesses, and web professionals. YOU ARE the best part of WPBeginner! Like every year, I will take… Read More »
The post WPBeginner Turns 15 Years Old – Reflections, Updates, and a Giveaway ($50,000 in Prizes) first appeared on WPBeginner.
Wordpress

Build your own copilot with Microsoft Azure AI Studio  

 No matter your use case, Microsoft Azure AI Studio accelerates the generative AI development lifecycle, empowering organizations to build and shape the future with AI.  
The post Build your own copilot with Microsoft Azure AI Studio   appeared first on Microsoft Azure Blog.
Azure

Location Auto-migration Complete

What changed?
On 24 July 2023, we announced the auto-migration of location extensions to assets. For the majority of accounts, location extensions were automatically migrated to assets. This change was made to expand the variety of ways in which your l...
Google

How to Make a Classified Ads Website with WordPress (Step by Step)

Many of our readers ask us about different ways to make money online with WordPress. While starting an online store or doing affiliate marketing are straightforward options, you might also be interested in creating a classified ads website. A classified ads website is an online… Read More »
The post How to Make a Classified Ads Website with WordPress (Step by Step) first appeared on WPBeginner.
Wordpress

WordPress 6.6 RC2

WordPress 6.6 RC2 is ready for download and testing! This version of the WordPress software is under development. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, please evaluate RC2 on a test server or a local environment. Reaching this phase of the release cycle is a […]
Wordpress

Dive into native Windows development with new WinUI workload and template improvements

At //Build 2024, the WinUI team announced a renewed focus on WinUI as one of the premier app development frameworks we recommend for native Windows app development. To make it as seamless and easy as possible to get into coding, we created a new Windows Dev Center page,
The post Dive into native Windows development with new WinUI workload and template improvements appeared first on Visual Studio Blog.
Microsoft

Let GitHub Copilot draft of your pull request description

Writing good pull request descriptions is essential for effective code reviews and collaboration. But it’s time-consuming and tedious, especially when you have multiple commits or complex changes. That’s why we’re highlighting a feature that will make your life better with the help of GitHub Copilot: generated pull request descriptions.
The post Let GitHub Copilot draft of your pull request description appeared first on Visual Studio Blog.
Microsoft

What’s New in Microsoft Teams | June 2024

In June, we introduced exciting enhancements to Microsoft Teams. I regularly use Copilot compose to help make my draft messages clearer and in the tone that I’m aiming for. Additionally, the new meeting organizer controls let me manage access to meetin...
Microsoft

110+ Mindblowing SEO Statistics and Trends in 2024 (Ultimate List)

When it comes to optimizing our websites for getting more traffic, we always look at the latest SEO trends and data for inspiration. Search engines are the most common way users discover information online, and strong SEO helps your website rank higher in the search… Read More »
The post 110+ Mindblowing SEO Statistics and Trends in 2024 (Ultimate List) first appeared on WPBeginner.
Wordpress

Sustaining Digital Certificate Security – Entrust Certificate Distrust

Posted by Chrome Root Program, Chrome Security Team


Update (09/10/2024): In support of more closely aligning Chrome’s planned compliance action with a major release milestone (i.e., M131), blocking action will now begin on November 12, 2024. This post has been updated to reflect the date change. Website operators who will be impacted by the upcoming change can explore continuity options offered by Entrust. Entrust has expressed its commitment to continuing to support customer needs, and is best positioned to describe the available options for website operators. Learn more at Entrust’s TLS Certificate Information Center.





The Chrome Security Team prioritizes the security and privacy of Chrome’s users, and we are unwilling to compromise on these values.


The Chrome Root Program Policy states that CA certificates included in the Chrome Root Store must provide value to Chrome end users that exceeds the risk of their continued inclusion. It also describes many of the factors we consider significant when CA Owners disclose and respond to incidents. When things don’t go right, we expect CA Owners to commit to meaningful and demonstrable change resulting in evidenced continuous improvement.


Over the past several years, publicly disclosed incident reports highlighted a pattern of concerning behaviors by Entrust that fall short of the above expectations, and has eroded confidence in their competence, reliability, and integrity as a publicly-trusted CA Owner.


In response to the above concerns and to preserve the integrity of the Web PKI ecosystem, Chrome will take the following actions.


Upcoming change in Chrome 131 and higher:



TLS server authentication certificates validating to the following Entrust roots whose earliest Signed Certificate Timestamp (SCT) is dated after November 11, 2024 (11:59:59 PM UTC), will no longer be trusted by default.


CN=Entrust Root Certification Authority - EC1,OU=See www.entrust.net/legal-terms+OU=(c) 2012 Entrust, Inc. - for authorized use only,O=Entrust, Inc.,C=US

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust, Inc. - for authorized use only,O=Entrust, Inc.,C=US

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

CN=Entrust Root Certification Authority,OU=www.entrust.net/CPS is incorporated by reference+OU=(c) 2006 Entrust, Inc.,O=Entrust, Inc.,C=US

CN=Entrust Root Certification Authority - G4,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust, Inc. - for authorized use only,O=Entrust, Inc.,C=US

CN=AffirmTrust Commercial,O=AffirmTrust,C=US

CN=AffirmTrust Networking,O=AffirmTrust,C=US

CN=AffirmTrust Premium,O=AffirmTrust,C=US

CN=AffirmTrust Premium ECC,O=AffirmTrust,C=US
TLS server authentication certificates validating to the above set of roots whose earliest SCT is on or before November 11, 2024 (11:59:59 PM UTC), will be unaffected by this change.This approach attempts to minimize disruption to existing subscribers using a recently announced Chrome feature to remove default trust based on the SCTs in certificates.


Additionally, should a Chrome user or enterprise explicitly trust any of the above certificates on a platform and version of Chrome relying on the Chrome Root Store (e.g., explicit trust is conveyed through a Group Policy Object on Windows), the SCT-based constraints described above will be overridden and certificates will function as they do today.


To further minimize risk of disruption, website operators are encouraged to review the “Frequently Asked Questions" listed below.

Why is Chrome taking action?



Certification Authorities (CAs) serve a privileged and trusted role on the Internet that underpin encrypted connections between browsers and websites. With this tremendous responsibility comes an expectation of adhering to reasonable and consensus-driven security and compliance expectations, including those defined by the CA/Browser TLS Baseline Requirements.


Over the past six years, we have observed a pattern of compliance failures, unmet improvement commitments, and the absence of tangible, measurable progress in response to publicly disclosed incident reports. When these factors are considered in aggregate and considered against the inherent risk each publicly-trusted CA poses to the Internet ecosystem, it is our opinion that Chrome’s continued trust in Entrust is no longer justified.

When will this action happen?



Blocking action will begin on approximately November 12, 2024, affecting certificates issued at that point or later.


Blocking action will occur in Versions of Chrome 131 and greater on Windows, macOS, ChromeOS, Android, and Linux. Apple policies prevent the Chrome Certificate Verifier and corresponding Chrome Root Store from being used on Chrome for iOS.

What is the user impact of this action?



By default, Chrome users in the above populations who navigate to a website serving a certificate issued by Entrust or AffirmTrust after November 11, 2024 (11:59:59 PM UTC) will see a full page interstitial similar to this one.


Certificates issued by other CAs are not impacted by this action.

How can a website operator tell if their website is affected?



Website operators can determine if they are affected by this issue by using the Chrome Certificate Viewer.


Use the Chrome Certificate Viewer



Navigate to a website (e.g., https://www.google.com)

Click the “Tune" icon

Click “Connection is Secure"

Click “Certificate is Valid" (the Chrome Certificate Viewer will open)


Website owner action is not required, if the “Organization (O)” field listed beneath the “Issued By" heading does not contain “Entrust" or “AffirmTrust”.

Website owner action is required, if the “Organization (O)” field listed beneath the “Issued By" heading contains “Entrust" or “AffirmTrust”.




What does an affected website operator do?



We recommend that affected website operators transition to a new publicly-trusted CA Owner as soon as reasonably possible. To avoid adverse website user impact, action must be completed before the existing certificate(s) expire if expiry is planned to take place after November 11, 2024 (11:59:59 PM UTC).


While website operators could delay the impact of blocking action by choosing to collect and install a new TLS certificate issued from Entrust before Chrome’s blocking action begins on November 12, 2024, website operators will inevitably need to collect and install a new TLS certificate from one of the many other CAs included in the Chrome Root Store.

Can I test these changes before they take effect?



Yes.


A command-line flag was added beginning in Chrome 128 (available in Canary/Dev at the time of this post’s publication) that allows administrators and power users to simulate the effect of an SCTNotAfter distrust constraint as described in this blog post FAQ.


How to: Simulate an SCTNotAfter distrust1. Close all open versions of Chrome2. Start Chrome using the following command-line flag, substituting variables described below with actual values


--test-crs-constraints=$[Comma Separated List of Trust Anchor Certificate SHA256 Hashes]:sctnotafter=$[epoch_timestamp]


3. Evaluate the effects of the flag with test websites Example: The following command will simulate an SCTNotAfter distrust with an effective date of April 30, 2024 11:59:59 PM GMT for all of the Entrust trust anchors included in the Chrome Root Store. The expected behavior is that any website whose certificate is issued before the enforcement date/timestamp will function in Chrome, and all issued after will display an interstitial.

--test-crs-constraints=02ED0EB28C14DA45165C566791700D6451D7FB56F0B2AB1D3B8EB070E56EDFF5,
43DF5774B03E7FEF5FE40D931A7BEDF1BB2E6B42738C4E6D3841103D3AA7F339,
6DC47172E01CBCB0BF62580D895FE2B8AC9AD4F873801E0C10B9C837D21EB177,
73C176434F1BC6D5ADF45B0E76E727287C8DE57616C1E6E6141A2B2CBC7D8E4C,
DB3517D1F6732A2D5AB97C533EC70779EE3270A62FB4AC4238372460E6F01E88,
0376AB1D54C5F9803CE4B2E201A0EE7EEF7B57B636E8A93C9B8D4860C96F5FA7,
0A81EC5A929777F145904AF38D5D509F66B5E2C58FCDB531058B0E17F3F0B41B,
70A73F7F376B60074248904534B11482D5BF0E698ECC498DF52577EBF2E93B9A,
BD71FDF6DA97E4CF62D1647ADD2581B07D79ADF8397EB4ECBA9C5E8488821423
:sctnotafter=1714521599

Illustrative Command (on Windows):

"C:\Users\User123\AppData\Local\Google\Chrome SxS\Application\chrome.exe" --test-crs-constraints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sctnotafter=1714521599
Illustrative Command (on macOS):

"/Applications/Google Chrome Canary.app/Contents/MacOS/Google Chrome Canary" --test-crs-constraints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sctnotafter=1714521599
Note: If copy and pasting the above commands, ensure no line-breaks are introduced.

Learn more about command-line flags here.
I use Entrust certificates for my internal enterprise network, do I need to do anything?
Beginning in Chrome 127, enterprises can override Chrome Root Store constraints like those described for Entrust in this blog post by installing the corresponding root CA certificate as a locally-trusted root on the platform Chrome is running (e.g., installed in the Microsoft Certificate Store as a Trusted Root CA).
How do enterprises add a CA as locally-trusted?
Customer organizations should defer to platform provider guidance.
What about other Google products?
Other Google product team updates may be made available in the future.
Google

WPBeginner Spotlight 01 – Plugin Acquisitions, New Features + More WordPress News

In the month of June 2024, we’ve seen a lot of exciting developments in the WordPress community. From AIOSEO plugin acquiring the LowFruits keyword tool to the WordPress core team releasing the beta version of WordPress 6.6, the list goes on. And that’s just a… Read More »
The post WPBeginner Spotlight 01 – Plugin Acquisitions, New Features + More WordPress News first appeared on WPBeginner.
Wordpress

Add up to 500,000 members to spaces in Google Chat

What’s changingShortly after introducing announcements in Google Chat last year, we increased the number of users you can add to a space from 8,000 to 50,000. To provide greater flexibility and inclusiveness for larger organizations, we’re excited to a...
Google

Improving calculation speed in Google Sheets

What’s changingWe recently announced the latest advancements in Sheets, including that we’ve doubled the speed of calculation in Google Sheets on Google Chrome and Microsoft Edge browsers. This update can improve the speed of actions like formulas, piv...
Google

Build exciting career opportunities with new Azure skilling options

Microsoft Build is more than just a tech conference—it's a celebration of innovation, a catalyst for growth, and a gateway to unlocking your professional potential through skilling opportunities on Microsoft Learn. In this blog, we’ll look back at some of the most exciting Microsoft Azure tools that were featured at Build 2024 and put you on the path to attain proficiency.
The post Build exciting career opportunities with new Azure skilling options appeared first on Microsoft Azure Blog.
Azure

7 Best WordPress Support Agencies for 2024 (Expert Pick)

At WPBeginner, we receive many requests from readers asking us if we recommend any support agencies for WordPress maintenance and management services. From our own experience of running multiple WordPress websites, we know that it can be tricky to handle everything behind the scenes. This… Read More »
The post 7 Best WordPress Support Agencies for 2024 (Expert Pick) first appeared on WPBeginner.
Wordpress

The future of Microsoft Teams in VDI

Today we embark on another chapter of the Microsoft Teams story in VDI, with the public preview of a new optimization architecture that brings closer alignment between physical and virtual desktops.
 
Last year we released a fully revamped Teams a...
Microsoft

Microsoft is a Leader in the 2024 Gartner® Magic Quadrant™ for Data Science and Machine Learning Platforms 

Microsoft is a Leader in this year’s Gartner® Magic Quadrant™ for Data Science and Machine Learning Platforms. Azure AI provides a powerful, flexible end-to-end platform for accelerating data science and machine learning innovation.
The post Microsoft is a Leader in the 2024 Gartner® Magic Quadrant™ for Data Science and Machine Learning Platforms  appeared first on Microsoft Azure Blog.
Azure

Code Assessment with .NET Upgrade Assistant

We are thrilled to announce the latest enhancements to the .NET Upgrade Assistant. .NET Upgrade Assistant helps upgrade solutions to newer versions of .NET. Whether you’re upgrading from .NET Framework to .NET 8 or just between .NET Core versions (from .NET 6 or 7 to .NET 8 or 9),
The post Code Assessment with .NET Upgrade Assistant appeared first on Visual Studio Blog.
Microsoft

WordPress 6.6 RC1

The first release candidate (RC1) for WordPress 6.6 is ready for download and testing! This version of the WordPress software is under development. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, please evaluate RC1 on a test server or a local environment. Reaching this phase of […]
Wordpress