Root Causes: A PKI and Security Podcast

Latest Episodes:

Root Causes 377: Is CPS/Issuance Misalignment a Revocation Event? Apr 11, 2024

Show notes

If you issue public certificates that are fully compliant except that they do not reflect what your CPS says, are they misissued? Do they require revocation? This is a question with real stakes as we see multiple current instances of a CA denying revocation for that reason. In this episode we explore this issue.

Root Causes 376: Gartner's New CLM Framework Apr 08, 2024

Show notes

Gartner has released a new framework for Certificate Lifecycle Management, called the Seven Core Functions of Certificate Automation. We walk through this framework and answer how it fits in with our own Five Pillars of CLM.

Root Causes 375: What Is Name Space Lifecycle Management? Apr 05, 2024

Show notes

In this guest episode we discuss name space hygiene with Geir Rasmussen, founder of NodeZro. CNAMEs, SPF, DMARC, name server entries, and other DNS identifiers, left unattended, can expose companies to identity-based attacks. We lay out the steps in addressing name space cleanup.

Root Causes 374: NIST Cyber Security Framework 2 Released Mar 31, 2024

Show notes

NIST Cyber Security Framework version 2.0 is released. It includes guidance on identity management and authentication. In this first episode of a series, we describe this framework's basic structure and its effect on industry.

Root Causes 373: Massive Brand Hijack Subverts More Than 21,000 Domains and Subdomains Mar 29, 2024

Show notes

A massive name space attack has hijacked more than 21,000 domains and subdomains, including a who's who list of major global brands. This huge and innovative attack takes advantage of inherited trust in abandoned domains. We explain what is happening.

Root Causes 372: Bugzilla Bloodbath Mar 26, 2024

Show notes

It's a bloodbath on Bugzilla. Since March 9, more than 25 new Bugzilla bugs been written up, which is 10x the typical pace. And it's not over. In this episode we explain what is going on and why.

Root Causes 371: MPIC Rules Go to CABF Ballot Mar 22, 2024

Show notes

A ballot for Multi-perspective Issuance Corroboration (MPIC), formerly known as MPDV, has entered a discussion period in the CA/Browser Forum (CABF). We explain the details of what it contains.

Root Causes 370: Drama on Bugzilla Mar 19, 2024

Show notes

An evolving incident on Bugzilla has garnered a lot of attention and touches several important issues in the WebPKI ecosystem. We report what went on and unpack the issues involved.

Root Causes 369: iMessage to Be PQC Enabled Mar 14, 2024

Show notes

Apple has announced that iMessage will employ post-quantum cryptography (PQC). We explain the implications of this announcement.

Root Causes 368: CRYSTALS-Kyber Is Now ML-KEM Mar 13, 2024

Show notes

What has been known as CRYSTALS-Kyber now has the new official name of Module Lattice-based Key Encryption Module, or ML-KEM. We give an update on the state of the NIST round 3 winners.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Root Causes: A PKI and Security Podcast

Related Podcasts

Links

Stay Connected