Кращі подкасти про Pki (2025)

1
Root Causes 461: Sectigo Acquires Entrust Public CA Business 10:28

3d ago10:28

10:28

Sectigo today announced the acquisition of the Entrust public CA business. Entrust will go forward as a Sectigo reseller. Join us to learn the details.Tim Callan and Jason Soroko

1
Root Causes 460: The State of PQC with Michele Mosca 31:48

4d ago31:48

31:48

In this episode we are joined by Dr. Michela Mosca. We discuss his pioneering work identifying the need for post-quantum cryptography, where PQC stands today, and what the future may hold.Tim Callan and Jason Soroko

1
Root Causes 459: 2024 Lookback - Shortening Certificate Lifespans & DCV 12:20

8d ago12:20

12:20

2024 set in motion major changes for certificate lifespans and DCV. In this episode we discuss the Apple 47-day proposal, stepping down certificate term, public versus private CA use cases, DCV reuse periods, MPIC, WHOIS, and other topics.Tim Callan and Jason Soroko

1
Root Causes 458: Apple Extends Entrust Distrust to SMIME and VMC 8:47

13d ago8:47

8:47

Apple has added itself to the Entrust distrust and has extended this distrust to S/MIME and VMC. We explain.Tim Callan and Jason Soroko

1
Root Causes 457: 2024 Lookback - Guests 11:26

15d ago11:26

11:26

We had a remarkable year on the Root Causes podcast in terms of our guests. We look back at the extremely expert guests we were lucky to talk about in 2024.Tim Callan and Jason Soroko

1
Root Causes 456: 2024 Lookback - Bugzilla Bloodbath 11:24

18d ago11:24

11:24

In this 2024 lookback episode, we give an overview of the firestorm of Bugzilla incidents that we refer to as the Bugzilla Bloodbath. The Bugzilla Bloodbath affected actions around the Entrust distrust, delayed revocation reform, 47-day SSL certificate maximum term, linting, and more.Tim Callan and Jason Soroko

1
Root Causes 455: PQC Standardization in IETF 35:54

24d ago35:54

35:54

We talk with guest Sofia Celi of Brave Browser, who leads the IETF PQC standardization effort, about the process of setting standards for PQC-compatible digital certificates. We learn about expected timelines, hybrid strategies, the NIST PQC onramp's role, and more.Tim Callan and Jason Soroko

1
Root Causes 454: 2024 Lookback - Post quantum cryptography (PQC) 7:45

30d ago7:45

7:45

2024 was an eventful year for post quantum cryptography (PQC). This includes FIPS standards, the PQC onramp, and the dawn of widespread interest among IT professionals.Tim Callan and Jason Soroko

1
Root Causes 453: It Turns Out Monkeys Couldn't Type Shakespeare After All 14:12

30d ago14:12

14:12

The old adage states that a monkey in front of a keyboard, given enough time, could randomly type the works of Shakespeare. Apparently, someone ran the numbers and said not so much. We break it down and explain why we're discussing this on a PKI podcast.Tim Callan and Jason Soroko

1
Root Causes 452: 2024 Predictions Scorecard 10:38

1M ago10:38

10:38

We go over our predictions for 2024 and score our ability as prognosticators.Tim Callan and Jason Soroko

1
Root Causes 451: A Year in CABF Ballots 34:48

1M ago34:48

34:48

It was a crazy year for CA/Browser Forum activity, with nearly three times the normal number of ballots. Guest Martijn Katerbarg goes over the 32 CABF ballots from 2024.Tim Callan and Jason Soroko

1
Root Causes 450: 2025 Predictions 48:29

1M ago48:29

48:29

We make our 2025 predictions. Topics include maximum certificate term, AI, post-quantum cryptography (PQC), deep fakes, and more.Tim Callan and Jason Soroko

1
Root Causes 449: What Is a Quantum-safe HSM? 23:48

1M ago23:48

23:48

Repeat guest Bruno Coulliard of Crypto4A joins us to define a quantum-safe (or PQC enabled) hardware security module.Tim Callan and Jason Soroko

1
Root Causes 448: The Privilege of Being a Public CA 25:39

2M ago25:39

25:39

We go over Tim's September 2024 keynote speech at ENISA CA Day, "The Privilege of Being a Public CA."Tim Callan and Jason Soroko

1
Root Causes 447: NIST Deprecates RSA-2048 and ECC 256 13:46

2M ago13:46

13:46

As part of its post-quantum cryptography (PQC) initiative NIST has released a draft deprecating RSA-2048 and ECC 256 by 2030 and disallowing them by 2035. We get into the details.Tim Callan and Jason Soroko

1
Root Causes 446: Sectigo Assumes Five CABF Offices 13:20

2M ago13:20

13:20

Tim has stepped into the position of vice-chair of the CA/Browse Forum, and Sectigo now holds five chair or vice-chair positions in that body. We explain how leadership is chosen, the offices Sectigo holds today, and some of our vision for CABF in the next two years.Tim Callan and Jason Soroko

1
Root Causes 445: Seven Reasons to Shorten Certificate Lifespans 27:56

2M ago27:56

27:56

We take a deep dive into the seven reasons shorter certificate lifespans are better.Tim Callan and Jason Soroko

1
Root Causes 444: What Happens to the WebPKI if Google Sells Chrome? 19:25

2M ago19:25

19:25

We discuss how a potential break of Chrome from Google would affect the WebPKI. We look at product changes, resourcing, post-quantum cryptography (PQC), innovation, moonshot initiatives, and other public CAs.Tim Callan and Jason Soroko

1
Root Causes 443: Is MSCA Going Away? 13:22

2M ago13:22

13:22

In this episode we discuss the challenges for enterprises using Microsoft Active Directory Certificate Services (ADCS).Tim Callan and Jason Soroko

1
Root Causes 442: Apple Proposal to Reduce SSL Lifespan Updated 22:13

2M ago22:13

22:13

Apple has published an updated draft to its proposal for shortening the lifespan of SSL certificates, including a final maximum term of 47 rather than 45 days. We explain.Tim Callan and Jason Soroko

1
Root Causes 441: New White House Initiative Targets BGP 14:52

2M ago14:52

14:52

A new White House initiative requires that federal agencies need to create plans to thwart BGP attacks. We discuss, including Resource PKI (RPKI) and Multi-Perspective Issuance Corroboration (MPIC).Tim Callan and Jason Soroko

1
Root Causes 440: Public Key Directories 12:57

2M ago12:57

12:57

We talk about public key directories and complicating factors such as Tailscale, VPN, TOR, Cloudflare, and Zero Trust.Tim Callan and Jason Soroko

1
Root Causes 439: PQC Onramp Narrowed Down to 15 Candidates 17:13

3M ago17:13

17:13

NIST has narrowed its PQC onramp contest to 15 candidates. We go over who remains and the makeup of the remaining candidates.Tim Callan and Jason Soroko

1
Root Causes 438: PQC Is an Existential Requirement 28:19

3M ago28:19

28:19

Repeat guest Bruno Couillard argues that cryptography is part of the foundational fabric of our lives and that the transition to PQC is an existential requirement.Tim Callan and Jason Soroko

1
Root Causes 437: Don't Blame the Linter 11:21

3M ago11:21

11:21

Linters are essential tools for maintaining quality of certificate issuance. Public open-source linters are available to help CAs assure compliance. As a result, CAs have begun attributing gaps in coverage by public linters as the root cause for misissuance events. We explain why this is faulty reasoning.…

1
Root Causes 436: Formal Proofs 10:22

3M ago10:22

10:22

Formal proofs are critical to cryptography. We discuss how better processes and AI can accelerate formal proofs of cryptographic concepts.Tim Callan and Jason Soroko

1
Root Causes 435: The PQC "Q Day" Is Not That Simple 19:45

3M ago19:45

19:45

The PQC community likes to debate when crypto relevant quantum computers will be available, which is sometimes called "Q day." In this episode we explain how radically oversimplified this concept is and dive into the nuances of what a "cryptographically relevant quantum computer" really will be.Tim Callan and Jason Soroko

1
Root Causes 434: Did Researchers Break AES Using Quantum Annealing? 11:43

3M ago11:43

11:43

News reports claim Chinese researchers broke AES with a quantum annealing computer. We clarify the details and talk about the implications of this reported discovery.Tim Callan and Jason Soroko

1
Root Causes 433: Will AI Eat All the Electricity? 10:28

4M ago10:28

10:28

We explore the question of whether or not we have enough electricity to fuel AI's expected growth.Tim Callan and Jason Soroko

1
Root Causes 432: Apple Floats New Short-lived Certificate Proposal 26:20

4M ago26:20

26:20

Apple recently floated a draft CABF ballot for commentary that steps down maximum term for SSL certificates starting next year and eventually landing at 45 days in 2027. We share the details.Tim Callan and Jason Soroko

1
Root Causes 431: New Mozilla Proposal to Combat Delayed Revocation 28:10

4M ago28:10

28:10

Deliberate delay of mandatory revocations has plagued the WebPKI in 2024. A new proposed policy from Mozilla stands to eliminate most of this behavior. In this episode we go over the proposal and explain its potential consequences.Tim Callan and Jason Soroko

1
Root Causes 430: How Does a TLS Handshake Work? 14:31

4M ago14:31

14:31

In this episode we give a high-level explanation of what happens in a TLS 1.3 handshake and then discuss what will happen when PQC is included.Tim Callan and Jason Soroko

1
Root Causes 429: ServiceNow Outage Due to Expired Root Certificate 7:04

4M ago7:04

7:04

A ServiceNow private CA root expired, creating outages across hundreds of enterprises. We explain what appears to have gone on.Tim Callan and Jason Soroko

1
Root Causes 428: .MOBI Attack Puts WHOIS-based DCV into Question 17:10

4M ago17:10

17:10

White hat researchers managed to take over WHOIS for the .mobi TLD. Among other things, this discovery foretells the death of WHOIS as a valid email source for Domain Control Validation (DCV).Tim Callan and Jason Soroko

1
Root Causes 427: Mapping CLM to NIST CSF 2.0 15:46

4M ago15:46

15:46

In this episode we map the contributions of Certificate Lifecycle Management into the new NIST Cybersecurity Framework 2.0.Tim Callan and Jason Soroko

1
Root Causes 426: Expired Certificate Takes Down Bank of England 7:42

4M ago7:42

7:42

A certificate expiration is now known to have created July's outage of Bank of England. Join us as we shake our heads in amazement yet again.Tim Callan and Jason Soroko

1
Root Causes 425: PQC Requirements for Voting Systems 10:53

4M ago10:53

10:53

In honor of the upcoming US elections, we describe the six main requirements for a post-quantum voting system.Tim Callan and Jason Soroko

1
Root Causes 424: Using LoRA IoT Protocol for Clandestine Communications 11:43

4M ago11:43

11:43

In this episode we describe the LoRA protocol, which allows IoT devices to communicate securely without using a cellular network, and how it can be used for secret communications.Tim Callan and Jason Soroko

1
Root Causes 423: Is a Certificate Software or a Service? 18:28

4M ago18:28

18:28

In this episode we discuss the dual nature of a public certificate as both a file and part of a holistic service that lasts until its expiration. We discuss revocation checking, CT logging, GAAP accounting, linters, certificate tracking tools, Certificate Lifecycle Management, standards bodies, post-quantum cryptography, and subscription models.…

1
Root Causes 422: New Date for Entrust Distrust 4:27

4M ago4:27

4:27

The Chrome root program has changed the date for the Entrust distrust. Join us to get the details.Tim Callan and Jason Soroko

1
Root Causes 421: FIDO 2 Implementation Problems 8:27

5M ago8:27

8:27

White hat researchers have raised concerns about FIDO 2 (AKA WebAuthn). We explain.Tim Callan and Jason Soroko

1
Root Causes 420: New Side Channel Attack Against YubiKeys 12:43

5M ago12:43

12:43

EUCLEAK, a newly revealed side channel vulnerability, can clone the contents of a YubiKey. We talk about the attack and its significance.Tim Callan and Jason Soroko

1
Root Causes 419: What Happens to Vendors Who Don't Support ACME When 90-day Certificates Come? 16:14

5M ago16:14

16:14

Though it is the closest thing to an industry-standard API, there are still products and operating systems that don't support ACME. In this episode we explore what happens to these products once 90-day SSL certificates become the requirement.Tim Callan and Jason Soroko

1
Root Causes 418: Moving from Cryptographic Homogeneity to Cryptographic Heterogeneity 18:25

5M ago18:25

18:25

One seldom discussed consequence of quantum computers and PQC is the move from cryptographic homogeneity to cryptographic heterogeneity, with multiple KEMs and DSAs eventually expected as ongoing standards. We examine the consequences of this change.Tim Callan and Jason Soroko

1
Root Causes 417: Introducing pkimetal, the PKI Meta-linter 8:44

5M ago8:44

8:44

We introduce pkimetal, an open source project from Rob Stradling that allows CA to write to many popular linters with a single integration. We explain the importance and pitfalls of linters and how pkimetal improves linter implementation.Tim Callan and Jason Soroko

1
Root Causes 416: SSL Subscriber Uses a Restraining Order to Prevent Revocation 22:39

5M ago22:39

22:39

An enterprise SSL subscriber recently used a Temporary Restraining Order to prevent the proper revocation of misissued certificates. We explain what happened, why it's deeply problematic, and how the industry might consider responding.Tim Callan and Jason Soroko

1
Root Causes 415: What Can I Do with These New FIPS PQC Standards? 19:33

5M ago19:33

19:33

NIST recently released PQC algorithmic standards in FIPS-203, FIPS-204, and FIPS-205 (ML-KEM, ML-DSA, and SLH-DSA). We describe what is necessary for enterprises to begin using these algorithms.Tim Callan and Jason Soroko

1
Root Causes 414: What Are the Revocation Periods for Public Certificates? 11:57

5M ago11:57

11:57

In this episode we detail the mandatory revocation periods for leaf certificates and intermediates and explain when a 24-hour versus a 120-hour revocation deadline applies.Tim Callan and Jason Soroko

1
Root Causes 413: NIST Releases Standards for First Three PQC Algorithms 7:15

6M ago7:15

7:15

On August 13, 2024, NIST released its first three standards for PQC algorithms, ML-KEM, ML-DSA, and SLH-DSA. We tell you where to find them and talk about what happens next.Tim Callan and Jason Soroko

1
Root Causes 412: Google Throws in the Towel on Eliminating Cookies 9:54

6M ago9:54

9:54

Cookies are incredibly useful but also pose grave privacy concerns. We have in the past covered Chrome's initiatives to replace cookies. Now Chrome has announced that for the foreseeable future cookies will remain. We explain.Tim Callan and Jason Soroko

Подкасти, які варто послухати

Подкасти на тему Pki

Подкасти, які варто послухати

Короткий довідник