No Password Required By Keytos

You may have heard warnings about the risks of running PKI in the cloud, but cloud PKI is not as scary as some people make it sound. In this episode, Igal Flegmann and Aaron Crawfis break down the most common cloud PKI myths, separate fact from fear, and explain what organizations should actually consider when moving their PKI to the cloud.

Have you ever thought about the difference between working at a large corporation such as Microsoft vs a Startup? In this video two Microsoft Veterans (Aaron Crawfis and Igal Flegmann) talk about the difference between their time at Microsoft vs how it is working at Keytos and creating a startup from the ground up.

Keytos just launched Keytos Connect an application that allows you to connect to Wi-Fi using your SSO Entra ID credentials, in this podcast we have a special guest Grayson Nocera to talk about the development behind this tool and how it actually works in the backend.Get Started with Keytos Connect: https://www.keytos.io/docs/keytos-connect/

Is your internet browsing history actually private?In this episode of No Password Required, Aaron Crawfis and Igal Flegmann break down what your employer, parents, internet provider, Wi-Fi administrator, websites, VPN provider, and government may be able to see when you browse the internet.They explain what incognito mode really does, how workplace monitoring and TLS inspection work, what your router and ISP can track, whether VPNs actually protect you, and how governments may access online data. The conversation also covers encryption, browser tracking, public Wi-Fi risks, employee monitoring, ChatGPT and AI privacy, and the future of quantum-resistant security.Yes, this includes what can still be seen when you use incognito mode.

Public TLS/SSL certificates are getting shorter. By 2029, publicly trusted certificates will have a maximum validity of just 47 days, forcing organizations to rethink how they manage certificate lifecycles.In this episode of No Passwords Required, Aaron Crawfis joins Igal Flegmann to explain what these changes mean, why browser vendors are pushing for shorter certificate lifetimes, and how organizations can prepare before certificate renewals become a constant operational challenge. And the best part? You can do it for free!

Public TLS certificates are getting dramatically shorter lifetimes, with the industry moving toward 47-day certificates. For organizations still managing certificates manually, that change could have major implications.In this episode, Richard Hicks joins us to discuss why short-lived certificates are becoming the norm, the challenges of certificate revocation, and why automation is quickly becoming a requirement rather than a best practice.We also explore the future of PKI, including post-quantum cryptography, crypto agility, ACME, Active Directory Certificate Services (ADCS), Intune certificate deployment, TPM-protected credentials, smart cards, and enterprise certificate lifecycle management.Topics include:• Why 47-day certificates are coming• The real reason certificate revocation struggles• ACME and certificate automation• Public vs. private PKI• Enterprise certificate management best practices• TPM-protected certificates and credential security• Intune certificate deployment• The future of ADCS• Post-quantum cryptography and crypto agility• Building a modern PKI strategyWhether you're an IT administrator, security architect, PKI engineer, or Microsoft professional, this conversation provides practical insight into where certificate management is headed and how to prepare for the changes ahead.Guest: Richard Hicks

Keytos Started with Igal Flegmann leaving Microsoft to co-found Keytos with his Brother Marcos, but how did Aaron Crawfis join? In this video we talk about how Igal and Aaron met at Microsoft, their time at Microsoft and how they grew Keytos to be a profitable cybersecurity company.

Is your internet browsing history private? What can your employer, parent or government can see from your browsing history? Yes this includes when you use incognito

The government of the United States has said that all home routers that are not made in the US will be banned. Why are they banning routers and what does it mean for you?

With all the outages happening in the large cloud providers, should you move your infrastructure to your own servers? In this Episode Aaron Crawfis and Igal Flegmann deep dive into the largest cloud outages and what can we learn about them, as well as some war stories from their time at one of the largest Cloud Provider.

In this episode, Igal Flegmann and Aaron Crawfis share their real-world experience working in Microsoft Security and break down how to secure a cloud-only environment using Microsoft Entra ID and native Microsoft security tools. They walk through modern, passwordless authentication strategies—including Entra Certificate-Based Authentication (CBA) and passkeys—and explain how to implement strong identity protection in practice.The conversation also covers advanced security concepts like Privileged Access Workstations (PAWs) and identity isolation for protecting high-risk and critical environments. Drawing from their work at Keytos, they provide practical guidance, architecture insights, and best practices for building a secure, zero trust cloud infrastructure.If you're looking to strengthen your cloud security, implement passwordless authentication, or better protect identities in Entra ID, this episode offers a hands-on perspective from experts actively solving these challenges.

In this episode of No Password Required the podcast about cyber security and current events, Aaron Crawfis and Igal Flegmann deep dive into AI in the world of cybersecurity from how hackers are using it to how we use it at Keytos and how we see AI transforming the cybersecurity industry. 

In this episode, our cybersecurity experts unpack the biggest breaches of 2025, analyze how and why they happened, and explore what’s next for the future of cybersecurity including the critical steps organizations must take to prevent similar attacks.