Root Causes: A PKI and Security Podcast

Latest Episodes:

Root Causes 297: Certificate Expiration Creates Starlink Outage Apr 26, 2023

Show notes

A recent outage in the Starlink internet service was caused by an unexpected certificate expiration. We discuss this ongoing problem and how 90-day maximum certificate term will exacerbate it.

Root Causes 296: SHOULD We or MUST We? Apr 21, 2023

Show notes

The CA/Browser Forum guidelines contain many prescribed requirements, with language containing the word SHOULD or MUST. In this episode we explain the specifying power of these two words, why they are used, and what they signal about the intent behind a guideline and how the rules might evolve.

Root Causes 295: Genesis Criminal Marketplace Taken Down Apr 17, 2023

Show notes

A large, public criminal marketplace for stolen logins and other information was rolled up by law enforcement across seventeen countries. Genesis Marketplace offered not only traditional login credentials but also associated data needed to defeat MFA.

Root Causes 294: Root Causes Honored by Webby Awards Apr 13, 2023

Show notes

The Root Causes podcast has received a Webby Honoree award. Jason and Tim briefly celebrate and discuss the challenge of operating a niche, homemade podcast while being directly compared to professionally produced podcasts on mainstream topics from media companies. Plus, Tim's new Root Causes t-shirt.

Root Causes 293: What Is Certbot? Apr 10, 2023

Show notes

Certbot is an important part of the ACME standard. This open source tool makes it easier for many IT administrators to use ACME to automate provisioning and installation of SSL / TLS certificates.

Root Causes 292: Validation Data Reuse for 90-day Certificates Apr 06, 2023

Show notes

As the industry explores the expected consequences of 90-day maximum term for SSL / TLS certificates, some are wondering if the allowed validation data reuse period stands to go down also. We explain today's data reuse rules and what the evidence indicates will be required for both domain control validation (DCV) and organization information validation.

Root Causes 291: CLM and SIEM Apr 03, 2023

Show notes

We discuss how Certificate Lifecycle Management (CLM) interacts with Security Incident and Event Management (SIEM). The certificate world is chock full of events such as renewals, revocations, admin logins, and provisioning and removal of employee access. We talk about expected behaviors in the CLM and monitoring them.

Root Causes 290: What Are QGIS and QIIS? Mar 29, 2023

Show notes

In this episode we define Qualified Government Information Source (QGIS) and Qualified Independent Information Source (QIIS), which are critical to CABF-compliant organization validation. We explain how they fit into validation and the criteria for a reliable information source.

Root Causes 289: What Is a Cryptographic Center of Excellence? Mar 27, 2023

Show notes

In this episode we dig into an emerging idea, which is the cryptographic center of excellence. We discuss how such a center of excellence would work and the benefits it can bring to an enterprise.

Root Causes 288: ISARA Releases Patents on Hybrid Certificates Mar 22, 2023

Show notes

In this episode we are joined by Atsushi Yamada, CEO of ISARA. He explains how ISARA has put its patents on hybrid certificates into the public domain and why. We explain the role of hybrid certificates in PQC and ongoing crypto agility.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Root Causes: A PKI and Security Podcast

Related Podcasts

Links

Stay Connected