# Changelog

> Changes to SSL/TLS, newest first.

- 2026-10-25 [Full (strict), OpenWAF Origin CA and authenticated origin pulls](https://developers.openwaf.dev/changelog/2026-10-25-origin-ca-and-full-strict/index.md): Verify the origin's certificate per name, issue free Origin CA certificates for up to 15 years, and let only the edge reach your server.