Featured Contributor
Jason Soroko
SVP of Product at Sectigo
Jason has 20 years of experience researching, innovating, educating markets, developing intellectual property, and contributing to national-level guidance and consortium standards. He works closely with enterprise companies daily to synthesize managed PKI security solutions that meet real-world operational needs.

Jason Soroko is an experienced security technology innovator. The SVP of Product for Sectigo is responsible for facing customers, researching, innovating, educating, and contributing to strategy, national level guidance, intellectual property development, and consortium standards. Solving real business problems by synthesizing security state of the art with real world operational needs is what Jason does on a daily basis.
Jason has previous experience in complex data structures and Geographic Information Systems, especially in the fields on climate statistics and spatial mathematics. Jason worked as an architect and developer of complex data structures and mathematical problems related to GIS systems for the oil and gas industry.
Recent Posts from Jason Soroko
-
Listen Now
EPISODE 334
Broadcast Date:
September 27, 202318 minutes
Podcasts Sep 27, 2023Root Causes 334: What Is Attestation on the Web?
Most people hate dealing with CAPTCHA, but it offers benefits for web sites. We discuss alternatives to CAPTCHA, how they work, and their pros and cons.
-
Listen Now
EPISODE 333
Broadcast Date:
September 21, 202317 minutes
Podcasts Sep 21, 2023Root Causes 333: Intel Side Channel Attack Steals Private Keys
A newly revealed side channel attack can capture AES encryption keys from Intel chips. We explain this significant and powerful attack.
-
Listen Now
EPISODE 332
Broadcast Date:
September 14, 202311 minutes
Podcasts Sep 14, 2023Root Causes 332: Acoustic AI-based Key Logging Attack
An AI model that can interpret keystrokes based on the sound of keyboard use over a phone or video call and steal passwords.
-
Listen Now
EPISODE 331
Broadcast Date:
September 13, 202314 minutes
Podcasts Sep 13, 2023Root Causes 331: Microsoft Restores Trust to Code Signing Root
Recent erroneous behavior on Windows indicates that Microsoft removed - and then re-added - a legacy VeriSign root in its trusted roots list.
-
Listen Now
EPISODE 330
Broadcast Date:
September 5, 202322 minutes
Podcasts Sep 05, 2023Root Causes 330: End-to-end PQC in Use Today
Our hosts are joined by IronCap CEO Andrew Cheung as he discusses commercially available PQC solutions today, including VPN, email, and crypto currency.
-
Listen Now
EPISODE 329
Broadcast Date:
August 29, 202311 minutes
Podcasts Aug 29, 2023Root Causes 329: What Is Messaging Layer Security?
The recently published Messaging Layer Security (MLS) protocol establishes key exchange protocols for simultaneous communication with 3+ participants.
-
Listen Now
EPISODE 328
Broadcast Date:
August 23, 20237 minutes
Podcasts Aug 23, 2023Root Causes 328: What Is the Debian Weak Key Flaw?
In 2008 the world of SSL was shocked by a flaw in a popular operating system that limited the set of possible private keys on this OS to about 32,000.
-
Listen Now
EPISODE 327
Broadcast Date:
August 18, 202317 minutes
Podcasts Aug 18, 2023Root Causes 327: What Is Multi-perspective Domain Validation?
In this episode we explain Border Gateway Protocol (BGP) attacks and how multi-perspective domain validation (MPDV) can defeat them.
-
Listen Now
EPISODE 326
Broadcast Date:
August 15, 202312 minutes
Podcasts Aug 15, 2023Root Causes 326: The Difference Between .ml and .mil
Mistyped email addresses aimed at the US military frequently are sent to email addresses in Mali instead, to the tune of hundreds of thousands per year.