Podcasts

A phone number is a routing label, not proof of identity. Why SMS OTPs, SIM swaps and weak checks fail.

Certificate agility explained: why root stores force shorter lifespans and why the public WebPKI can’t tolerate bad PKI.

Turducken certificates wrap RSA in ML-DSA to stop PQC downgrade attacks. Tim and Jason explain how and when.

Hijacked ccTLD DNS broke domain validation until CT logs exposed rogue certificates. Why CAA failed and what to do.

P vs NP, quantum computers and AI-driven cryptanalysis: why cryptographic agility is the only safe assumption.

Bugzilla Bloodbath Redux: 138 open bugs, mostly third-party reported. Tim and Jason explain the AI-driven surge.

Chrome's MTC timeline ends with removing all non-MTC CAs from its root store in late 2028. See what it means for CAs, PQC readiness and the pace of PKI change.

AI guardrails, quantum oracles and the future of classical computing: the quantum Fourier transform demo wraps up.

Jason uses a quantum simulator to show us how a cryptographically relevant quantum comptuer (CRQC) would employ Shor's algorithm to attack RSA. Part one of two, with guest Bruno Coulliard.

In this second of two episodes, Jason walks guest Bruno Coulliard and me through his real-world experience building quantum simulators, including some of the lessons he learned.

In this first of two episodes, Jason walks guest Bruno Coulliard and me through his real-world experience building quantum simulators, including some of the lessons he learned.

Repeat guest Bruno Coulliard of Crypto4A joins us to discuss the accelerating pace of change in digital technology, which is going at a rate unprecedented in human history. How do we as people adjust to the hyperspeed of today's technology landscape? And how do we apply these ideas to cryptography?