All episodes

Root Causes 287: GoDaddy Private Key Breach

Root Causes 286: PKI and PQC in New White House Cybersecurity Initiative

Root Causes 285: Can ChatGPT Write Malware?

Root Causes 284: 90-day SSL Certificates Are on the Way

Root Causes 283: Google Optional OCSP Proposal Clarified

Root Causes 282: HSMs and Post Quantum Cryptography

Root Causes 281: Google Proposes Optional OCSP

Root Causes 280: Did an AI Break CRYSTALS-Kyber?

Root Causes 279: ChatGPT Watermarking

Root Causes 278: Microsoft on Certificates and FIDO

Root Causes 277: Privacy Sandbox

Root Causes 276: ChatGPT and Identity Reputation

Root Causes 275: No Fly List Stolen

Root Causes 274: New Quantum Readiness Law

Root Causes 273: A Deep Dive on CA Agnostic

Root Causes 272: OCSP's Privacy Problem

Root Causes 271: A Whole Fleet of Identity-based Automotive Hacks

Root Causes 270: What Is the Difference Between KEM and PKE?

Root Causes 269: Did a Patent Dispute Nearly Derail Post Quantum Cryptography?

Root Causes 268: WAFs Subverted by JSON Bypass

Root Causes 267: Can Quantum Computers Break RSA Today?

Root Causes 266: End-to-end Encryption in the Apple Technology Stack

Root Causes 265: A Banner Year for Post-quantum Cryptography

Root Causes 264: Crypto Agility for 2023

Root Causes 263: Secure Connection Methods Roundup

Root Causes 262: The Continuing Erosion of Online Identity

Root Causes 261: Why I Don't Say Spoof

Root Causes 260: CA TrustCor Deprecated

Root Causes 259: What Went Wrong with the Twitter Blue Check Marks

Root Causes 258: New S/MIME Baseline Requirements Ratified

Root Causes 257: FTX Crypto Exchange Collapses

Root Causes 256: What Is Harvest and Decrypt?

Root Causes 255: What Is a Privacy Browser?

Root Causes 254: Toyota Symmetric Key Exposed on GitHub

Root Causes 253: OpenSSL Vulnerability Explained

Root Causes 252: Sidestepping Microsoft Email Encryption

Root Causes 251: What's Next for the NIST PQC Primitives?

Root Causes 250: 250 Episodes of Root Causes!

Root Causes 249: What Is MFA Exhaustion?

Root Causes 248: Azure Code Signing Announced

Root Causes 247: Uber Breach Unpacked

Root Causes 246: Google Chrome Root Program Announced

Root Causes 245: One Time Passcode as a Liability

Root Causes 244: PwC Survey Reports Cyber Security as Biggest Risk to Companies

Root Causes 243: Which Came First, the BRs or the EVGs?

Root Causes 242: Let's Encrypt Founder Peter Eckersley Passes

Root Causes 241: Is China Outspending the West in Quantum Computing?

Root Causes 240: Hyundai Production Private Key Found in How-to Manual

Root Causes 239: Post-quantum Cryptography Candidate SIKE Defeated

Root Causes 238: Tim's Big Phishing Adventure

Root Causes 237: Why Mozilla Is So Important to CAs

Root Causes 236: Active Directory Patch Knocks Out Non-MS Identity Consumers

Root Causes 235: What Is Lattice-based Cryptography?

Root Causes 234: Report from the 2022 RSA Conference

Root Causes 233: CISA Recommendations for Post-Quantum Crypto

Root Causes 232: NIST Announces Post Quantum Crypto Selections

Root Causes 231: What Is FIDO?

Root Causes 230: What Is Apple Passkey?

Root Causes 229: Browsing Collectives and the 80/20 Rule of Browser Privacy

Root Causes 228: Getting the FLoC out of Here

Root Causes 227: Let's Talk About Cookies

Root Causes 226: The Six Benefits of SSH Certificates

Root Causes 225: The Difference Between Relying Parties and Certificate Consumers

Root Causes 224: The Five Problems with SSH Keys

Root Causes 223: CT Log-Enabled Attacks on WordPress Sites

Root Causes 222: Consolidation and PKI Solutions

Root Causes 221: What Are SSH Keys?

Root Causes 220: The Difference Between OTP and Passwordless

Root Causes 219: New Quantum Cryptography Legislation Introduced

Root Causes 218: PKI Nomenclature Oddities

Root Causes 217: What's the Deal with the Recent Okta Security Breach?

Root Causes 216: What Is crt.sh?

Root Causes 215: Passwordless Authentication and Legacy Systems

Root Causes 214: New DUO MFA Flaw Explained

Root Causes 213: 600-domain Phishing Attack

Root Causes 212: S/MIME Limited to Three Years

Root Causes 211: Does CLM Make Wildcard and MDC Irrelevant?

Root Causes 210: Living off the Land

Root Causes 209: One-Day Deployment of Certificate Lifecycle Management (CLM) Platforms

Root Causes 208: Automotive Information Systems Bricked by HD Radio Error

Root Causes 207: Former Gartner Analyst David Mahdi Jumps on the Playing Field

Root Causes 206: What Is Web3?

Root Causes 205: Anatomy of an Encrypted Peer-to-Peer Mesh Network

Root Causes 204: PKI's Role in Passwordless

Root Causes 203: What Is a Credential Vault?

Root Causes 202 : What Is Certificate Transparency?

Root Causes 201: What Are the Baseline Requirements?

Root Causes 200: Why Not to Copy and Paste Commands from Web Pages

Root Causes 199: What Is Privileged Access Management?

Root Causes 198: Deep Voice Fakes

Root Causes 197: Tim's Digital Haircut

Root Causes 196: What Is Certificate Agnostic?

Root Causes 195: iOS App Privacy Audits

Root Causes 194: Crypto Versus Cryptocurrency

Root Causes 193: 4 Positive Security Trends for 2022

Root Causes 192: 14 Security Fallacies We Still Have in 2021

Root Causes 191: What Is Robotic Process Automation (RPA)?

Root Causes 190: Phishing Coinbase

Root Causes 189: What Is CA Agnostic?

Root Causes 188: Introduction to Web Security