Featured Contributor
Jason Soroko
Fellow at Sectigo
Jason has 20 years of experience researching, innovating, educating markets, developing intellectual property, and contributing to national-level guidance and consortium standards. He works closely with enterprise companies daily to synthesize managed PKI security solutions that meet real-world operational needs.
Jason Soroko is an experienced security technology innovator, responsible for the product team that drives innovation at Sectigo. He is responsible for interfacing with customers, researching, innovating, educating, and contributing to strategy, national-level guidance, intellectual property development, and consortium standards. Solving real business problems by synthesizing state-of-the-art security with real-world operational needs is what Jason does best.
Recent Posts from Jason Soroko
-
Watch Now
REGISTER
A live webinar hosted by Sectigo.
60 minutes
Webinars UpcomingHow mature is your Certificate Lifecycle Management?
The surge in certificate usage has reached unprecedented levels, with industry standards for certificate lifespans progressively shrinking.
-
Listen Now
EPISODE 420
Broadcast Date:
September 13, 202413 minutes
Podcasts Sep 13, 2024Root Causes 420: New Side Channel Attack Against YubiKeys
EUCLEAK, a newly revealed side-channel vulnerability, can clone the contents of a YubiKey. We talk about the attack and its significance.
-
Listen Now
EPISODE 419
Broadcast Date:
September 10, 202416 minutes
Podcasts Sep 10, 2024Root Causes 419 - What Happens to Vendors Who Don't Support ACME?
There are still products and operating systems that don't support ACME. We explore what happens to them when 90-day SSL certificates become required.
-
Listen Now
EPISODE 418
Broadcast Date:
September 6, 202418 minutes
Podcasts Sep 06, 2024Root Causes 418: From Cryptographic Homogeneity to Heterogeneity
PQC will move us from cryptographic homogeneity to cryptographic heterogeneity, with multiple KEMs and DSAs eventually expected as ongoing standards.
-
Listen Now
EPISODE 417
Broadcast Date:
September 3, 20249 minutes
Podcasts Sep 03, 2024Root Causes 417: Introducing pkimetal, the PKI Meta-linter
We introduce pkimetal, an open source project from Rob Stradling that allows CA to write to many popular linters with a single integration.
-
Listen Now
EPISODE 416
Broadcast Date:
August 30, 202423 minutes
Podcasts Aug 30, 2024Root Causes 416: Subscriber Restraining Order Prevents Revocation
An enterprise SSL subscriber recently used a Temporary Restraining Order to prevent the proper revocation of misissued certificates. We explain.
-
Listen Now
EPISODE 415
Broadcast Date:
August 27, 202420 minutes
Podcasts Aug 27, 2024Root Causes 415: What Can I Do with These New FIPS PQC Standards?
NIST recently released PQC algorithmic standards in FIPS-203, 204, and 205. We describe what is necessary for enterprises to begin using these algorithms.
-
Listen Now
EPISODE 414
Broadcast Date:
August 23, 202412 minutes
Podcasts Aug 23, 2024Root Causes 414: What Are the Revocation Periods for Public Certs?
We detail mandatory revocation periods for leaf certificates and intermediates and explain when a 24-hour versus a 120-hour revocation deadline applies.
-
Listen Now
EPISODE 413
Broadcast Date:
August 16, 20247 minutes
Podcasts Aug 16, 2024Root Causes 413: NIST Releases Standards for Three PQC Algorithms
On August 13, 2024, NIST released its first three standards for PQC algorithms, ML-KEM, ML-DSA, and SLH-DSA.