Ressourcen

Imagine what happens if you use the wrong LLM, including a malicious model placed there for mischief or crime. How do you know? By signing our AI models.

These days we frequently discuss "the WebPKI." But what does that really mean? In this episode we define WebPKI and how it has evolved over time.

Recent erroneous behavior on Windows indicates that Microsoft removed - and then re-added - a legacy VeriSign root in its trusted roots list.

In this follow up to our episode 320, we explain Microsoft's mitigation and new understanding that shows its impact to be broader than originally thought.

A new root kit attack in the wild is code signed by a Microsoft certificate. We explain kernel-level attacks and how this attack occurred.

New rules require delivery of code signing certificates by secure HSM. We describe the key attestation method of delivery.

The SolarWinds supply chain attack i includes unusual manipulations of digital identity and certificates. We explore these aspects of the attack.

Apple's Big Sur OS rollout drove a slowdown in the company's OCSP responders, affecting all Apple operating systems. We explain what happened and why.

SSL certificate practices are governed by the rules of the CA/Browser Forum; what is this forum, who is in it, and where does it get its authority?

Certificate revocation is an essential part of the certificate lifecycle. Join our hosts as they discuss revocation by the CA, code signing, and malware.