All episodes

Root Causes 487: Security 2030

Root Causes 486: 47-day Maximum Term Ballot Passes CABF

Root Causes 485: What Is Open MPIC?

Root Causes 484: Multi Good Factor Authentication

Root Causes 483: Introducing the PQC Sandbox

Root Causes 482: Microsoft and PQC

Root Causes 481: What Is Protocol Ossification?

Root Causes 480: White House PQC Executive Order

Root Causes 479: AI Adversarial Machine Learning

Root Causes 478: Should We All Switch from RSA to ECC?

Root Causes 477: Comparative Security Philosophies

Root Causes 476: The Need for Security KPIs

Root Causes 475: Can Your AI Scheme Against You?

Root Causes 474: Explaining Shor's Algorithm

Root Causes 473: Does Security Software Lack Creativity?

Root Causes 472: AI Offensive Modeling

Root Causes 471: ACME for PQC

Root Causes 470: The MFA False Equivalency Fallacy

Root Causes 469: The All or Nothing Fallacy in Cybersecurity

Root Causes 468: UK Demands New Backdoor from Apple

Root Causes 467: Decoupling Public from Private Use Cases

Root Causes 466: Apple Moves 47-day Ballot to CABF Vote

Root Causes 465: Twelve Bugzilla Sins for CAs to Avoid

Root Causes 464: Defending Against Harvest and Decrypt

Root Causes 463: Cellular Networks Are Insecure

Root Causes 462: Crypto War 3.0

Root Causes 461: Sectigo Acquires Entrust Public CA Business

Root Causes 460: The State of PQC with Michele Mosca

Root Causes 459: 2024 Lookback - Shortening Certificate Lifespans & DCV

Root Causes 458: Apple Extends Entrust Distrust to SMIME and VMC

Root Causes 457: 2024 Lookback - Guests

Root Causes 456: 2024 Lookback - Bugzilla Bloodbath

Root Causes 455: PQC Standardization in IETF

Root Causes 454: 2024 Lookback - Post quantum cryptography (PQC)

Root Causes 453: It Turns Out Monkeys Couldn't Type Shakespeare After All

Root Causes 452: 2024 Predictions Scorecard

Root Causes 451: A Year in CABF Ballots

Root Causes 450: 2025 Predictions

Root Causes 449: What Is a Quantum-safe HSM?

Root Causes 448: The Privilege of Being a Public CA

Root Causes 447: NIST Deprecates RSA-2048 and ECC 256

Root Causes 446: Sectigo Assumes Five CABF Offices

Root Causes 445: Seven Reasons to Shorten Certificate Lifespans

Root Causes 444: What Happens to the WebPKI if Google Sells Chrome?

Root Causes 443: Is MSCA Going Away?

Root Causes 442: Apple Proposal to Reduce SSL Lifespan Updated

Root Causes 441: New White House Initiative Targets BGP

Root Causes 440: Public Key Directories

Root Causes 439: PQC Onramp Narrowed Down to 15 Candidates

Root Causes 438: PQC Is an Existential Requirement

Root Causes 437: Don't Blame the Linter

Root Causes 436: Formal Proofs

Root Causes 435: The PQC "Q Day" Is Not That Simple

Root Causes 434: Did Researchers Break AES Using Quantum Annealing?

Root Causes 433: Will AI Eat All the Electricity?

Root Causes 432: Apple Floats New Short-lived Certificate Proposal

Root Causes 431: New Mozilla Proposal to Combat Delayed Revocation

Root Causes 430: How Does a TLS Handshake Work?

Root Causes 429: ServiceNow Outage Due to Expired Root Certificate

Root Causes 428: .MOBI Attack Puts WHOIS-based DCV into Question

Root Causes 427: Mapping CLM to NIST CSF 2.0

Root Causes 426: Expired Certificate Takes Down Bank of England

Root Causes 425: PQC Requirements for Voting Systems

Root Causes 424: Using LoRA IoT Protocol for Clandestine Communications

Root Causes 423: Is a Certificate Software or a Service?

Root Causes 422: New Date for Entrust Distrust

Root Causes 421: FIDO 2 Implementation Problems

Root Causes 420: New Side Channel Attack Against YubiKeys

Root Causes 419: What Happens to Vendors Who Don't Support ACME When 90-day Certificates Come?

Root Causes 418: Moving from Cryptographic Homogeneity to Cryptographic Heterogeneity

Root Causes 417: Introducing pkimetal, the PKI Meta-linter

Root Causes 416: SSL Subscriber Uses a Restraining Order to Prevent Revocation

Root Causes 415: What Can I Do with These New FIPS PQC Standards?

Root Causes 414: What Are the Revocation Periods for Public Certificates?

Root Causes 413: NIST Releases Standards for First Three PQC Algorithms

Root Causes 412: Google Throws in the Towel on Eliminating Cookies

Root Causes 411: PQC Security Levels

Root Causes 410: CrowdStrike, Automatic Updates, and Walled Gardens

Root Causes 409: Mozilla Distrusts Entrust

Root Causes 408: Takeaways from Recent Conversations with PQC Experts

Root Causes 407: Whatever Happened to Passkeys?

Root Causes 406: Certificate Discovery Is for Internal Certificates, Too

Root Causes 405: What Is an Adversarial Self-replicating Prompt?

Root Causes 404: SCOTUS Ruling Will Change IT Security Regulation

Root Causes 403: NIST PQC Contest Round 4 and Onramp with Dustin Moody

Root Causes 402: New Social Engineering Powershell Attack

Root Causes 401: New SSH Remote Code Execution Vulnerability Revealed

Root Causes 400: French Court Orders DNS Poisoning

Root Causes 399: Entrust Distrusted

Root Causes 398: History of the NIST PQC Contest with Dustin Moody

Root Causes 397: All Post Quantum Systems Are Terrible

Root Causes 396: The Trouble with Microsoft Recall

Root Causes 395: Is Y2Q Like Y2K?

Root Causes 394: Snowflake, Ticketmaster, and MFA

Root Causes 393: PQC-enabled Chrome Breaks Other Software

Root Causes 392: Chromium Issues a Quality Ultimatum

Root Causes 391: 20 Percent of Web Visits Are PQC Enabled Today

Root Causes 390: Chromium Boosts Its Distrust Agility with a New Root Trust Deprecation

Root Causes 389: 2024 RSA Conference Wrap Up

Root Causes 388: What Is the WebPKI?