-
Podcast Dec 14, 2020
Root Causes 135: The Heartbleed Vulnerability
2014's Heartbleed vulnerability made it possible to steal private keys directly from web servers, requiring certificate replacement by the millions.
-
Webinar Dec 10, 2020
Q4 Sectigo Pulse: Special End of Year Edition
Join us for this special year-end edition to our Pulse webinars as we look back at 2020 and make predictions for 2021.
-
Podcast Dec 10, 2020
Root Causes 134: 2020 Lookback - SASE and Zero Trust Architecture
2020 was a big year for SASE (Secure Access Service Edge). We define SASE, ZTNA (Zero Trust Network Architecture), and SDP (Software Defined Perimeter).
-
Podcast Dec 07, 2020
Root Causes 133: 2020 Lookback - COVID-19
In 2020 COVID-19 changed the way we work. Our hosts dicsuss the affect on employee access, Zero Trust, retail IT, immunity passports, and more.
-
Podcast Dec 04, 2020
Root Causes 132: Examining MFA Through Soft Tokens
In our ongoing examination of MFA, we examine authentication through soft-token OTP (one-time passcode) and compare it to SMS tokens and hard tokens.
-
Podcast Nov 30, 2020
Root Causes 131: Apple OCSP Slowdown Explained
Apple's Big Sur OS rollout drove a slowdown in the company's OCSP responders, affecting all Apple operating systems. We explain what happened and why.
-
Podcast Nov 24, 2020
Root Causes 130: How to Get Rid of Password Breaches
We discuss the weaknesses of passwords and why they nonetheless are still common. We describe the roadmap for weeding out passwords from most systems.
-
Podcast Nov 19, 2020
Root Causes 129: Examining MFA Through Hard Tokens
Hard tokens are an old multi-factor authentication (MFA) form factor, still in use today. We examine the strengths and weaknesses of hard tokens.
-
Blog Post Nov 13, 2020
Any digital certificate that authenticates the identity of a website carries risk. There is risk that its private key has been secretly stolen, or that a heretofore unknown technique will render its cryptography insecure. There is risk that the domain has changed ownership since the certificate was issued, or that an undiscovered flaw in the requesting operating system has rendered its key predictable. There could even be a massive, brute force attack against its key underway right now.
-
Podcast Nov 12, 2020
Root Causes 128: What Is Total Certificate Agility?
Certificate agility refers to building our systems so that all certificates are known, current, and immediately replaceable.
-
Podcast Nov 05, 2020
Root Causes 127: What a Chief Compliance Officer at a Public CA Does
Our hosts discuss what compliance means at a public Certificate Authority (CA) like Sectigo and what the Chief Compliance Officer does.
-
Podcast Oct 28, 2020
Root Causes 126: IoT Ransomware
New research shows how ransomware attacks could be launched against IoT devices. Understand these attacks and what can be done to defend against them.