Certificate agility explained: why root stores force shorter lifespans and why the public WebPKI can’t tolerate bad PKI.
Jason Soroko
Jason Soroko is a seasoned security technology innovator and Senior Fellow at Sectigo, where he leads customer-facing engagements, drives research, and spearheads strategic initiatives at both organizational and national levels. He also contributes to the development of intellectual property and consortium standards. As co-host of the award-winning “Root Causes” podcast, Jason educates professionals on the latest trends in PKI and cybersecurity twice a week. His core strength is bridging cutting-edge security methods with real-world operational needs, ensuring that businesses are equipped with practical, forward-thinking solutions.
Recent posts by Jason Soroko
Turducken certificates wrap RSA in ML-DSA to stop PQC downgrade attacks. Tim and Jason explain how and when.
Hijacked ccTLD DNS broke domain validation until CT logs exposed rogue certificates. Why CAA failed and what to do.
P vs NP, quantum computers and AI-driven cryptanalysis: why cryptographic agility is the only safe assumption.
500 security leaders reveal progress on crypto agility, PQC, PKI modernization, and AI identity risks.
Bugzilla Bloodbath Redux: 138 open bugs, mostly third-party reported. Tim and Jason explain the AI-driven surge.
Chrome's MTC timeline ends with removing all non-MTC CAs from its root store in late 2028. See what it means for CAs, PQC readiness and the pace of PKI change.
Root Causes podcast
Root Causes 678: The harmonic observatory - simulating Quantum Fourier transform, Part 2
AI guardrails, quantum oracles and the future of classical computing: the quantum Fourier transform demo wraps up.
Root Causes podcast
Root Causes 677: The Harmonic Observatory - simulating quantum Fourier transform, Part 1
Jason uses a quantum simulator to show us how a cryptographically relevant quantum comptuer (CRQC) would employ Shor's algorithm to attack RSA. Part one of two, with guest Bruno Coulliard.
