-
Podcast Nov 18, 2024
Root Causes 440: Public Key Directories
We talk about public key directories and complicating factors such as Tailscale, VPN, TOR, Cloudflare, and Zero Trust.
-
Podcast Nov 15, 2024
Root Causes 439: PQC Onramp Narrowed Down to 15 Candidates
NIST has narrowed its PQC onramp contest to 15 candidates. We go over who remains and the makeup of the remaining candidates.
-
Podcast Nov 12, 2024
Root Causes 438: PQC Is an Existential Requirement
Repeat guest Bruno Couillard argues that cryptography is foundational to our lives and that the transition to PQC is an existential requirement.
-
Podcast Oct 29, 2024
Root Causes 436: Formal Proofs
Formal proofs are critical to cryptography. We discuss how better processes and AI can accelerate formal proofs of cryptographic concepts.
-
Podcast Oct 25, 2024
Root Causes 435: The PQC "Q Day" Is Not That Simple
We explain how radically oversimplified the concept of PQC "Q day" really is.
-
Podcast Oct 22, 2024
Root Causes 434: Did Researchers Break AES Using Quantum Annealing?
Reports suggest Chinese researchers used a quantum annealing computer to break AES. We clarify the findings and discuss the potential implications.
-
Podcast Oct 17, 2024
Root Causes 433: Will AI Eat All the Electricity?
News reports claim Chinese researchers broke AES with a quantum annealing computer. We clarify the details and talk about the implications of this reported discovery.
-
Podcast Oct 14, 2024
Root Causes 432: Apple Floats New Short-lived Certificate Proposal
Apple recently floated a draft CABF ballot for commentary that steps down maximum term for SSL certificates to 45 days by 2027.
-
Podcast Oct 11, 2024
Root Causes 431: New Mozilla Proposal to Combat Delayed Revocation
Deliberate delay of mandatory revocations has plagued the WebPKI in 2024. A new proposed policy from Mozilla stands to eliminate most of this behavior.
-
Podcast Oct 08, 2024
Root Causes 429: ServiceNow Outage Due to Expired Root Certificate
A ServiceNow private CA root expired, creating outages across hundreds of enterprises. We explain what appears to have gone on.
-
Podcast Oct 04, 2024
Root Causes 428: .MOBI Attack Puts WHOIS-based DCV into Question
White hat researchers managed to take over WHOIS for the .mobi TLD, foretelling the death of WHOIS as an email source for Domain Control Validation (DCV).
-
Podcast Oct 02, 2024
Root Causes 427: Mapping CLM to NIST CSF 2.0
In this episode we map the contributions of Certificate Lifecycle Management into the new NIST Cybersecurity Framework 2.0.