-
Listen Now
EPISODE 137
Broadcast Date:
December 21, 202031 minutes
Podcast Dec 21, 2020Root Causes 137: SolarWinds Supply Chain Attack and Digital Identity
The SolarWinds supply chain attack i includes unusual manipulations of digital identity and certificates. We explore these aspects of the attack.
-
Listen Now
EPISODE 136
Broadcast Date:
December 17, 202014 minutes
Podcast Dec 17, 2020Root Causes 136: 2020 Lookback - Quantum Safe Certificates
We discuss 2020's progress in the quest for quantum-safe encryption, including the algorithm candidate list, hybrid certificates, and IoT devices.
-
Listen Now
EPISODE 135
Broadcast Date:
December 14, 202025 minutes
Podcast Dec 14, 2020Root Causes 135: The Heartbleed Vulnerability
2014's Heartbleed vulnerability made it possible to steal private keys directly from web servers, requiring certificate replacement by the millions.
-
Listen Now
EPISODE 134
Broadcast Date:
December 10, 202024 minutes
Podcast Dec 10, 2020Root Causes 134: 2020 Lookback - SASE and Zero Trust Architecture
2020 was a big year for SASE (Secure Access Service Edge). We define SASE, ZTNA (Zero Trust Network Architecture), and SDP (Software Defined Perimeter).
-
Watch Now
60 minutes
Webinar Dec 10, 2020Q4 Sectigo Pulse: Special End of Year Edition
Join us for this special year-end edition to our Pulse webinars as we look back at 2020 and make predictions for 2021.
-
Listen Now
EPISODE 133
Broadcast Date:
December 7, 202024 minutes
Podcast Dec 07, 2020Root Causes 133: 2020 Lookback - COVID-19
In 2020 COVID-19 changed the way we work. Our hosts dicsuss the affect on employee access, Zero Trust, retail IT, immunity passports, and more.
-
Listen Now
EPISODE 132
Broadcast Date:
December 4, 202017 minutes
Podcast Dec 04, 2020Root Causes 132: Examining MFA Through Soft Tokens
In our ongoing examination of MFA, we examine authentication through soft-token OTP (one-time passcode) and compare it to SMS tokens and hard tokens.
-
Listen Now
EPISODE 131
Broadcast Date:
November 30, 202017 minutes
Podcast Nov 30, 2020Root Causes 131: Apple OCSP Slowdown Explained
Apple's Big Sur OS rollout drove a slowdown in the company's OCSP responders, affecting all Apple operating systems. We explain what happened and why.
-
Listen Now
EPISODE 130
Broadcast Date:
November 24, 202016 minutes
Podcast Nov 24, 2020Root Causes 130: How to Get Rid of Password Breaches
We discuss the weaknesses of passwords and why they nonetheless are still common. We describe the roadmap for weeding out passwords from most systems.
-
Listen Now
EPISODE 129
Broadcast Date:
November 19, 202015 minutes
Podcast Nov 19, 2020Root Causes 129: Examining MFA Through Hard Tokens
Hard tokens are an old multi-factor authentication (MFA) form factor, still in use today. We examine the strengths and weaknesses of hard tokens.
-
Learn More
As Term Lengths Shorten Again, Automatic Certificate Management Is Key
Blog Post from Sectigo
Blog Post Nov 13, 2020Any digital certificate that authenticates the identity of a website carries risk. There is risk that its private key has been secretly stolen, or that a heretofore unknown technique will render its cryptography insecure. There is risk that the domain has changed ownership since the certificate was issued, or that an undiscovered flaw in the requesting operating system has rendered its key predictable. There could even be a massive, brute force attack against its key underway right now.
-
Listen Now
EPISODE 128
Broadcast Date:
November 12, 202015 minutes
Podcast Nov 12, 2020Root Causes 128: What Is Total Certificate Agility?
Certificate agility refers to building our systems so that all certificates are known, current, and immediately replaceable.