Root Causes Podcast

As a convenience, public cloud services such as AWS offer TLS certificates for use in their environments. Join our hosts as they explain this practice.

The Kazakhstan government is trying to force citizens to trust its own root. Join our hosts to understand Kazakhstan's attempts to weaponize public certs.

In this episode we examine the potential for quantum annealing to break RSA-based cryptography sooner than expected.

A Russian Advanced Persistent Threat (APT) is patching Chrome and Firefox to enable TLS fingerprinting even after its malware is removed.

Indiana University Bloomington recently published public SSL research, including methodology, incident types and causes, and rogue certificates.

A new Windows vulnerability allows creation of fake certificates on trusted roots. This episode explains possible exploits and what to do about them.

Modern processes have shattered the old concept of an enterprise IT perimeter. In this episode our hosts discuss various identity schemes and challenges.

Learn about research indicating that criminal marketplaces feature services to obtain original Extended Validation (EV) SSL certificates.

Recently we have seen major news items in some of the common Root Causes themes. Join our hosts as they discuss.

The month of August saw some unusual criminal activity when it comes to PKI and malware. Our hosts explain four August news stories.

Our hosts explore the specific requirements and challenges for quantum resistant cryptography for IoT networks and connected devices.

California Senate Bill 327 makes device security a requirement in California, setting the precedent for IoT security practices. Join us to learn more.

CA Authentication gives domain owners the ability to specify in DNS which CAs are allowed to issue SSL certificates for a domain. Join us to learn more.

Repeat guest and DevOps expert David Colon joins us again to discuss identity for microservices, including the use of very short-lived TLS certificates.

To enable broad access to information about COVID-19, Firefox has reinstated support for web sites using TLS 1.0 and 1.1. Join us to learn about this move.

Certificate revocation is an essential part of the certificate lifecycle. Join our hosts as they discuss revocation by the CA, code signing, and malware.

Caller ID numbers have no identity value as they are completely self-reported, enabling robocalling scams. Our hosts explain a new effort to end them.

The majority of phishing sites now use SSL certificates to closely imitate the behavior of legitimate sites. Join our hosts as we dig into these findings.