Root Causes Podcast

A new Windows vulnerability allows creation of fake certificates on trusted roots. This episode explains possible exploits and what to do about them.

Indiana University Bloomington recently published public SSL research, including methodology, incident types and causes, and rogue certificates.

A Russian Advanced Persistent Threat (APT) is patching Chrome and Firefox to enable TLS fingerprinting even after its malware is removed.

In this episode we examine the potential for quantum annealing to break RSA-based cryptography sooner than expected.

The Kazakhstan government is trying to force citizens to trust its own root. Join our hosts to understand Kazakhstan's attempts to weaponize public certs.

As a convenience, public cloud services such as AWS offer TLS certificates for use in their environments. Join our hosts as they explain this practice.

What does DevOps mean in today's enterprise. We explore cultural implications, "configuration drift," definition of release velocity, and DevSecOps.

In this episode we discuss the technology and ecosystem of cryptocurrencies, including blockchain and PKI.

It was an eventful year for infrastructure and IoT security. Join our hosts as they discuss 2019 trends and 2020 predictions for IoT and infrastructure.

SSL certificate practices are governed by the rules of the CA/Browser Forum; what is this forum, who is in it, and where does it get its authority?

Finding new quantum-resistant cryptography is a difficult task requiring coordinated effort. Join us to learn how NIST is leading this effort.

Our hosts and guest Alan Grau discuss what is happening with security flaws in the device integrity modules various devices, why, and what to do about it.

COVID-19 is rocking all aspects of our daily lives. So what are the implications of lock-downs, closures, and employee absenteeism on the PKI world?

SHA-1 was a cornerstone of the early secure web. 25 years later this hashing function is no longer secure. Join our hosts to hear the history of SHA-1.

Blockchain has become a household word. But what is it, and how does it work? Join our hosts and guest Alan Grau as they explain how blockchain functions.

It's been an eventful year for PKI. In this episode our hosts discuss how governments sought to control encryption, certificates, and public trust in 2019.

Our hosts describe the cyber threats facing connected cars, including real attacks, new challenges, and what manufacturers can do to protect drivers.

Our hosts discuss how long we have until quantum computers defeat today's encryption algorithms and what happens if our cryptography isn't updated in time.