-
Podcast Dec 21, 2023
Root Causes 350: Public Certificates & the GDPR Right to Be Forgotten
GDPR provides a "right to be forgotten," whereby individuals can demand the removal of PII from IT systems. This can run contrary to public PKI systems.
-
Podcast Dec 18, 2023
Root Causes 349: 2023 Lookback - Overall Trends
We look back at PKI in 2023. Trends include AI, enterprise crypto agility, OCSP's fall, PKI everywhere, weak passwords, and government vs. the internet.
-
Podcast Dec 15, 2023
Root Causes 348: What Is a Merkle Tree?
One foundational element of modern cryptographic systems is the Merkle tree. We explain this data structure, its properties, and its use cases.
-
Podcast Dec 11, 2023
Root Causes 347: 2023 Lookback - Shortening Certificate Lifespans
90-day SSL certificates is only part of it! 2023 has been a year of certificate lifespans getting shorter.
-
Podcast Dec 08, 2023
Root Causes 346: Private Credentials in Public Code
We uncover the epidemic of private credentials in public-facing code repositories, including why it occurs and what do to about it.
-
Podcast Dec 05, 2023
Root Causes 345: Apple Versus European Sideloading
The European Union is applying pressure to Apple to allow application sideloading. We cover why this is occurring, potential dangers, and Apple's response.
-
Podcast Nov 29, 2023
Root Causes 344: Introducing the PQC Onramp
NIST continues the search for PQC algorithms, especially those using non-Lattice schemes. We explain the PQC "onramp" and what we should expect.
-
Podcast Nov 22, 2023
Root Causes 343: The EIDAS 2.0 Controversy
A controversial aspect of the upcoming eIDAS 2.0 standard is that it limits browsers' ability to determine their own trusted roots. We explain.
-
Podcast Nov 17, 2023
Root Causes 342: Don't Change Your Password for Two Years
The CA/Browser Forum rules stipulate how often forced password changes for CA employees are to occur. They set a MINIMUM time. Join us to learn why.
-
Podcast Nov 13, 2023
Root Causes 341: The Trouble with Security Questionnaires
The practice of sending security questionnaires to technology vendors is exploding, and with it dysfunctional behavior is on the rise.
-
Podcast Nov 06, 2023
Root Causes 340: Is This Podcast Canadian Enough?
Canada's Online Streaming Act will require internet content providers to provide a minimum percentage of content produced by Canadians or face fines.
-
Podcast Oct 31, 2023
Root Causes 339: The ROI of CLM
In this episode we describe at a high level how to calculate the TCO of CLM as opposed to manual installation and management of certificates.