Root Causes Podcast

The recent expiration of Sectigo's AddTrust legacy root caused some systems to stop working and forced some admins to keep working over the weekend.

Once widely used, SHA-1 is considered insecure today and has been deprecated from the most common PKI use cases.

Mozilla has announced its intention to remove support for FTP from the Firefox browser.

Congress's proposed EARN IT act has many industry observers worried about its potential effect on the integrity of encrypted communication.

For PKI to be secure, private keys need to remain private. In this episode we explain "vaulting" for keys or other shared secrets.

One essential portion of the certificate lifecycle is the ability to revoke certificates. Public SSL certificates use a pair of mechanisms to communicate this revocation status to client machines, CRL and OCSP. In this episode we explain how these…

With the global workforce's massive shift to work-from-home, a clever new set of opportunistic social engineering attacks has sprung up to take advantage of our unfamiliarity with our new communication and collaboration applications and processes. In…

As we plan our societal return to normalcy, a number of people and groups are discussing the concept of an electronic "immunity passport" that individuals can possess if they are known to be immune to COVID-19 (possibly through vaccination or prior…

"Zero Trust" is an IT security philosophy that maximizes protection from threats by tightly controlling access and permissions for every individual, device, and process in the organization's environment. Learn how digital identity and certificates…

Advocates of distributed PKI say it will eliminate weaknesses in traditional, hierarchical PKI. In this episode we test if these claims to see hold up.

SSH keys are essential for controlling access to production infrastructure. Our hosts are joined by repeat guest David Colon.

"Zero Trust" maximizes protection from threats by controlling permissions for every individual, device, and process in the organization's environment.

Join our hosts and expert guest Alan Grau as they go over the similarities and differences between PKI and blockchain.

With lockdowns and working from home the norm, a great deal of attention has been paid to video conferencing technology.

Attacks compromising our cars' key fobs could be highly damaging. Join us to learn about the cryptographic architecture of a modern automotive key fob.

In this episode our hosts explain DNS over HTTPS, it potential uses, and how it works.

Our hosts debate if and how the pandemic's disruptive nature might change the date on which quantum computers are able to defeat today's encryption.

In this episode our hosts give a frank assessment of the difficulty that hard tokens present for the modern remote workforce.