Risorse

Certificate agility explained: why root stores force shorter lifespans and why the public WebPKI can’t tolerate bad PKI.

Sectigo integra ora GlobalSign ed EJBCA nel proprio gestore di certificati: resilienza multi-CA, un unico inventario, un unico flusso di lavoro.

Turducken certificates wrap RSA in ML-DSA to stop PQC downgrade attacks. Tim and Jason explain how and when.

Hijacked ccTLD DNS broke domain validation until CT logs exposed rogue certificates. Why CAA failed and what to do.

P vs NP, quantum computers and AI-driven cryptanalysis: why cryptographic agility is the only safe assumption.

Bugzilla Bloodbath Redux: 138 open bugs, mostly third-party reported. Tim and Jason explain the AI-driven surge.

Chrome's MTC timeline ends with removing all non-MTC CAs from its root store in late 2028. See what it means for CAs, PQC readiness and the pace of PKI change.

AI guardrails, quantum oracles and the future of classical computing: the quantum Fourier transform demo wraps up.

Jason uses a quantum simulator to show us how a cryptographically relevant quantum comptuer (CRQC) would employ Shor's algorithm to attack RSA. Part one of two, with guest Bruno Coulliard.

In this second of two episodes, Jason walks guest Bruno Coulliard and me through his real-world experience building quantum simulators, including some of the lessons he learned.

In this first of two episodes, Jason walks guest Bruno Coulliard and me through his real-world experience building quantum simulators, including some of the lessons he learned.

Repeat guest Bruno Coulliard of Crypto4A joins us to discuss the accelerating pace of change in digital technology, which is going at a rate unprecedented in human history. How do we as people adjust to the hyperspeed of today's technology landscape? And how do we apply these ideas to cryptography?

Researchers have used AI to decode two German Enigma messages that have remained unbroken since the second world war. We describe how this was accomplished.

I consumatori di oggi hanno aspettative elevate. Le diffuse campagne di phishing e spoofing rendono difficile distinguere le email legittime, specialmente quando...

This year we have seen a series of AI-enabled cryptographic attacks. In this episode we discuss a new exploit to abuse signing mechanisms in HSMs.

The PLANTS working group in IETF recently released its draft 6 of the Merkle Tree Certificates standard. We go over what is new in this draft.

I certificati SSL scadono per aumentare la sicurezza e la conformità. Periodi più brevi di 47 giorni migliorano la protezione, rendendo i rinnovi automatizzati essenziali per le aziende.