Ressourcen

Certificate agility explained: why root stores force shorter lifespans and why the public WebPKI can’t tolerate bad PKI.

Sectigo verbindet nun GlobalSign und EJBCA mit seinem Zertifikatsmanager: Ausfallsicherheit durch mehrere Zertifizierungsstellen, ein einziges Inventar, ein einziger Workflow.

Turducken certificates wrap RSA in ML-DSA to stop PQC downgrade attacks. Tim and Jason explain how and when.

Hijacked ccTLD DNS broke domain validation until CT logs exposed rogue certificates. Why CAA failed and what to do.

P vs NP, quantum computers and AI-driven cryptanalysis: why cryptographic agility is the only safe assumption.

Bugzilla Bloodbath Redux: 138 open bugs, mostly third-party reported. Tim and Jason explain the AI-driven surge.

Chrome's MTC timeline ends with removing all non-MTC CAs from its root store in late 2028. See what it means for CAs, PQC readiness and the pace of PKI change.

AI guardrails, quantum oracles and the future of classical computing: the quantum Fourier transform demo wraps up.

Jason uses a quantum simulator to show us how a cryptographically relevant quantum comptuer (CRQC) would employ Shor's algorithm to attack RSA. Part one of two, with guest Bruno Coulliard.

In this second of two episodes, Jason walks guest Bruno Coulliard and me through his real-world experience building quantum simulators, including some of the lessons he learned.

In this first of two episodes, Jason walks guest Bruno Coulliard and me through his real-world experience building quantum simulators, including some of the lessons he learned.

Repeat guest Bruno Coulliard of Crypto4A joins us to discuss the accelerating pace of change in digital technology, which is going at a rate unprecedented in human history. How do we as people adjust to the hyperspeed of today's technology landscape? And how do we apply these ideas to cryptography?

Researchers have used AI to decode two German Enigma messages that have remained unbroken since the second world war. We describe how this was accomplished.

Die Verbraucher von heute haben hohe Erwartungen. Weit verbreitete Phishing- und Spoofing-Kampagnen machen es schwierig zu erkennen, welche E-Mails echt sind, insbesondere wenn…

This year we have seen a series of AI-enabled cryptographic attacks. In this episode we discuss a new exploit to abuse signing mechanisms in HSMs.

The PLANTS working group in IETF recently released its draft 6 of the Merkle Tree Certificates standard. We go over what is new in this draft.

SSL-Zertifikate verfallen, um die Sicherheit zu erhöhen, sich ändernde Vorschriften einzuhalten und rechtzeitige Aktualisierungen zu fördern. Kürzere Gültigkeitsdauer – die bald auf 47 Tage reduziert wird – verbessern die Cybersicherheit, indem sie...