-
Listen Now
EPISODE 331
Broadcast Date:
September 13, 202314 minutes
Podcast Sep 13, 2023Root Causes 331: Microsoft Restores Trust to Code Signing Root
Recent erroneous behavior on Windows indicates that Microsoft removed - and then re-added - a legacy VeriSign root in its trusted roots list.
-
Listen Now
EPISODE 308
Broadcast Date:
June 5, 202318 minutes
Podcast Jun 05, 2023Root Causes 308: E-Tugra Root Deprecation
For the second time in under twelve months, a major browser is deprecating a CA's public trust. This time it's E-Tugra.
-
Listen Now
EPISODE 260
Broadcast Date:
December 8, 202230 minutes
Podcast Dec 08, 2022Root Causes 260: CA TrustCor Deprecated
Public CA TrustCor has had its roots deprecated by Microsoft and Mozilla. We explain what happened and why these roots ultimately were distrusted.
-
Listen Now
EPISODE 246
Broadcast Date:
October 4, 202212 minutes
Podcast Oct 04, 2022Root Causes 246: Google Chrome Root Program Announced
Google Chrome recently announced the formation of its trusted root program. We explain why Chrome is launching now and the program's implications.
-
Listen Now
EPISODE 237
Broadcast Date:
August 10, 202212 minutes
Podcast Aug 10, 2022Root Causes 237: Why Mozilla Is So Important to CAs
Mozilla is a highly important to the world of public certificates, with influence beyond what its browser market share would suggest. We examine why.
-
Listen Now
EPISODE 185
Broadcast Date:
November 2, 202117 minutes
Podcast Nov 02, 2021Root Causes 185: EU Covid Passport Root Key Stolen
The root certificates of the EU's Covid Passport program have suffered a private key compromise and counterfeit passports are for sale on the black market.
-
Listen Now
EPISODE 182
Broadcast Date:
October 18, 202125 minutes
Podcast Oct 18, 2021Root Causes 182: Let's Encrypt Root Expiration
Let's Encrypt's recent root expiration caused widespread service outages. We discuss this expiration and the recipe for avoiding problems in the future.
-
Listen Now
EPISODE 156
Broadcast Date:
March 16, 202118 minutes
Podcast Mar 16, 2021Root Causes 156: Kazakhstan Root Attack Revisited
In 2019 the Kazakh government attempted to force its citizens to trust its private root. A recent research paper examines this attack.
-
Listen Now
EPISODE 153
Broadcast Date:
March 5, 202123 minutes
Podcast Mar 05, 2021Root Causes 153: Too Many Roots
Trust models in multi-vendor environments are particularly tricky. Learn about best practices in trusted roots for complex, global supply chain ecosystems.
-
Listen Now
EPISODE 145
Broadcast Date:
January 29, 202111 minutes
Podcast Jan 29, 2021Root Causes 145: Google Chrome to Distrust CA Camerfirma
Google has announced distrust for Spanish public CA Camerfirma in Chrome build 90. We explain the reasons for (and implications of) this decision.
-
Listen Now
EPISODE 127
Broadcast Date:
November 5, 202014 minutes
Podcast Nov 05, 2020Root Causes 127: What a Chief Compliance Officer at a Public CA Does
Our hosts discuss what compliance means at a public Certificate Authority (CA) like Sectigo and what the Chief Compliance Officer does.
-
Listen Now
EPISODE 108
Broadcast Date:
July 24, 202020 minutes
Podcast Jul 24, 2020Root Causes 108: Why Do Certificates Expire?
Root expirations occasionally make headlines by breaking systems, but it's a fact that certificates expire every day, each a outage waiting to happen.