Root Causes Podcast

CABF has been discussing "default deny," an approach to ambiguities in existing guidelines, with significant impact on how to interpret the rules.

Ripple20 is a set of vulnerabilities in the early Treck TCP/IP stack, a popular IoT choice. Learn their significance and how we can avoid these problems.

Do quantum computers threaten SHA-2 and other hashing algorithms? Our hosts discuss the difference between Shor's Algorithms and Grover's Algorithm.

SXG certificates enable the display of AMP pages with the original publisher's authenticated URL in the mobile reader.

Though once considered a legitimate security option, certificate pinning is widely discredited for its certificate agility costs.

Our experts explain the pros and cons of single-domain, multi-domain, and wildcard certificates.

Unencrypted replication across data centers leaves data open to theft. Our hosts explain how this happens and what we can do about it.

Sectigo Quantum Labs is a destination for education on quantum-safe certificates (QSC). Our Quantum-Safe Kit enables creation of hybrid quantum-safe certs.

14 public CAs have to revoke intermediates and destroy their keys, putting millions of active SSL, S/MIME, and other public certificates at risk.

SMS-based one time password (OTP) is a common form of multi-factor authentication (MFA). Our hosts explain how this scheme fails the security test.

Root expirations occasionally make headlines by breaking systems, but it's a fact that certificates expire every day, each a outage waiting to happen.

ETSI has published its new Baseline Requirements for consumer IoT device security.

A newly proposed US Senate bill called the Lawful Access to Encrypted Data Act is discussed in this week's episode.

Google has just announced the coming availability of end-to-end encryption for its chat service.

The need to suddenly enable nearly 100% of information workers for secure, productive work-from-home was a curve ball for IT departments to deal with.

Our hosts often discuss the idea of errors in PKI implementations and the potential negative consequences for organizations.

Many people know that TOR is a browser used for anonymous online activity, but most of us don't know much more than that.

A new kind of identity certificate is coming that will enable businesses to include their logos in official email.