-
Listen Now
EPISODE 35
Broadcast Date:
August 28, 201920 minutes
Podcast Aug 28, 2019Root Causes 35: Quantum Apocalypse - Mosca's Inequality and Mad Max
Our hosts discuss how long we have until quantum computers defeat today's encryption algorithms and what happens if our cryptography isn't updated in time.
-
Blog Post Aug 26, 2019
Mozilla Should Reconsider Removing the EV Green Address Bar
The week before last, very quickly and without advance warning, Mozilla announced that it would remove the Extended Validation SSL certificate indicator from its upcoming build 70. This announcement spawned a very lively debate that is still going on. Below is my response to the thread, explaining why I believe it to be ill- considered and detrimental to overall internet security. Jason Soroko and I also covered Mozilla's decision to remove the EV SSL indicator in our Root Causes PKI and security podcast series.
-
Listen Now
EPISODE 34
Broadcast Date:
August 25, 201923 minutes
Podcast Aug 25, 2019Root Causes 34: Shadow IT and PKI
Shadow IT has become a fact of the modern enterprise. This fragmentation leads to identity and access challenges, which we discuss in this episode.
-
Listen Now
EPISODE 33
Broadcast Date:
August 18, 201917 minutes
Podcast Aug 18, 2019Root Causes 33: Prepare for One-Year Limits on SSL Certificates
A proposed CA/Browser Forum ballot stands to limit SSL certificates to 13 months. Learn what such a change might mean to IT professionals everywhere.
-
Listen Now
EPISODE 32
Broadcast Date:
August 15, 201925 minutes
Podcast Aug 15, 2019Root Causes 32: Why Do Browsers & Academics Say Differently About EV?
Research shows that sites with Extended Validation SSL certificates are less likely for malware and phishing. So why do browsers say it isn't effective?
-
Blog Post Aug 14, 2019
Be Prepared for One-Year SSL Certificate Duration
A recent CA/Browser Forum ballot sponsored by Google stands to limit SSL certificate lifespans to 397 days starting in March 2020. Should this pass, organizations using two-year SSL certificates will need to change their practices to only one-year certificates moving forward. Fortunately, automation options are available.
-
Listen Now
EPISODE 31
Broadcast Date:
August 12, 201911 minutes
Podcast Aug 12, 2019Root Causes 31: Using PKI to Authenticate Phone Callers
Caller ID numbers have no identity value as they are completely self-reported, enabling robocalling scams. Our hosts explain a new effort to end them.
-
Watch Now
44 minutes
Webinar Aug 08, 2019Root Causes Webinar: Securing a World of Interconnected Devices
Learn how PKI and device hardening technologies are the answer to secure your IoT devices for enterprise and critical infrastructure.
-
Listen Now
EPISODE 30
Broadcast Date:
August 6, 201917 minutes
Podcast Aug 06, 2019Root Causes 30: When a Whole Country Has Its PII Stolen
Recently we have seen major news items in some of the common Root Causes themes. Join our hosts as they discuss.
-
Watch Now
39 minutes
Webinar Aug 06, 2019The Future of PKI in the Modern Enterprise Webinar
Discover how Sectigo Private PKI allows you to secure and automate the management of your internal devices, regardless of which internal protocols you use.
-
Listen Now
EPISODE SB
Broadcast Date:
July 30, 201918 minutes
Podcast Jul 30, 2019Root Causes Special Bulletin: Kazakhstan Weaponizes the Public CA
The Kazakhstan government is trying to force citizens to trust its own root. Join our hosts to understand Kazakhstan's attempts to weaponize public certs.
-
Learn More
New Research on EV SSL Security from Georgia Tech
Blog Post from Sectigo
Blog Post Jul 29, 2019Online criminal actors reveals that domains with EV SSL certificates are 99.99% likely to be unassociated with bad cyber actors. CyFI studied 2.6 million domains associated with EV SSL to arrive at these results.
