-
Podcast Dec 17, 2024
Root Causes 448: The Privilege of Being a Public CA
We go over Tim's September 2024 keynote speech at ENISA CA Day, "The Privilege of Being a Public CA."
-
Podcast Dec 12, 2024
Root Causes 446: Sectigo Assumes Five CABF Offices
Tim has stepped into the position of vice-chair of the CA/Browse Forum, and Sectigo now holds five chair or vice-chair positions in that body. We explain how leadership is chosen, the offices Sectigo holds today, and some of our vision for CABF in the next two years.
-
Podcast Nov 25, 2024
Root Causes 442: Apple Proposal to Reduce SSL Lifespan Updated
Apple has published an updated draft to its proposal for shortening the lifespan of SSL certificates, including a final term of 47 rather than 45 days.
-
Podcast Aug 23, 2024
Root Causes 414: What Are the Revocation Periods for Public Certs?
We detail mandatory revocation periods for leaf certificates and intermediates and explain when a 24-hour versus a 120-hour revocation deadline applies.
-
Podcast Aug 02, 2024
Root Causes 409: Mozilla Distrusts Entrust
This week Mozilla chose to follow Chrome in deprecating the Entrust trusted roots. We give you the details and explain why this action matters.
-
Blog Post Jul 01, 2024
The CA/Browser Forum sets standards for digital certificates, enhancing security and reliability through collaboration among CAs, browsers, and tech firms.
-
Podcast Jun 07, 2024
Root Causes 392: Chrome Issues a Quality Ultimatum
At the latest CA/Browser Forum meeting, Google Chrome outlined its expectations for CA incident reporting quality and highlighted common failures.
-
Podcast May 31, 2024
Root Causes 390: Chrome Boosts Its Root Distrust Agility
A root trust deprecation highlights new Chrome functionality that enables more agile and less disruptive distrust events.
-
Webinar May 22, 2024
Bugzilla – the real issue of missed revocations
March and April 2024 have seen more than 25 new Bugzilla bugs being written up – more than 10 times the typical pace.
-
Podcast May 22, 2024
Root Causes 388: What Is the WebPKI?
These days we frequently discuss "the WebPKI." But what does that really mean? In this episode we define WebPKI and how it has evolved over time.
-
Podcast May 02, 2024
Root Causes 383: Delayed Revocation Events by the Numbers
An epidemic of delayed revocations has infected the public CA community. We track delayed revocations since the beginning of 2021 and discuss root causes.
-
Podcast Apr 15, 2024
Root Causes 378: Why Are Forced Revocations So Difficult?
We delve deep into the problem of failure to revoke on time and the multiple causes that lead to this ongoing failure.