Root Causes: A PKI and Security Podcast

Latest Episodes:

Root Causes 638: Catfishing Jul 08, 2026

Show notes

Tim shares his very personal experience with would-be catfishers and we talk about how AI is set to change the catfishing attack.

Root Causes 637: Is It Time to Get Rid of EV SSL? Jul 06, 2026

Show notes

The Baseline Requirements, CT logs, the Bugzilla Bloodbath, shortening certificate lifespans, all these trends serve to enforce a high level of quality and predictability across WebPKI certificates. Nearly twenty years after the introduction of EV SSL, we ask if it has served its purpose and should be retired.

Root Causes 636: The Future of Crypto Agility Jul 02, 2026

Show notes

Dustin Moody of NIST joins us to talk about the evolution of standardized cryptography beyond the current PQC efforts. Topics include maintaining visibility on cryptography presently in use, 50 years of RSA, and cryptographic heterogeny.

Root Causes 635: Do We Need to Get Rid of ECC? Jun 29, 2026

Show notes

Bas Westerbaan of Cloudflare joins us to discuss recent information that heightens concerns about Elliptic Curve Cryptography (ECC) and its vulnerability to a cryptographically relevant quantum computer (CRQC). We pose the question do we need to deprecate ECC in advance of our migration to ML-DSA and other PQC algorithms.

Root Causes 634: White House Executive Order Accelerates PQC Deployment Jun 26, 2026

Show notes

A new Executive Order (EO) moves the deadline for ML-DSA deployment up to 2031. We talk about why this happened and its implications on government, the technology industry, and enterprises around the globe.

Root Causes 633: ETSI PQC Conference Wrap Up Jun 24, 2026

Show notes

We are freshly returned from the 2026 ETSI PQC Conference. We give a debrief on the conference, including the difference between post quantum cryptography (PQC) and quantum key distribution (QKD), the algorithmic zoo, PQC for blockchain, the Dunning Kruger Effect, and cryptographic Frogger.

Root Causes 632: Gartner Risk and Security 2026 Wrap Up Jun 22, 2026

Show notes

We recently attended the Gartner Risk and Security conference for 2026, where we observed a great deal of attention on not only AI but also post quantum cryptography (PQC). Join us as we share the key takeaways.

Root Causes 631: Did the Bugzilla Bloodbath Change Anything? Jun 19, 2026

Show notes

2024 saw a flurry of high profile incidents for public CA, which we named the Bugzilla Bloodbath. We look back to see how the WebPKI has changed as a consequence.

Root Causes 630: The PQC Physicality Crisis Jun 17, 2026

Show notes

Resource-constrained devices may need to address PQC through real-time, seed-based, key generation. Unfortunately, this leaves the full key exposed very briefly in RAM. The potential consequences of this are far-reaching and scary. We go into the details.

Root Causes 629: Does the Evidence Support Moving PQC Deadlines to 2029? Jun 15, 2026

Show notes

Sam Jaques of the University of Waterloo returns to discuss his tracking of progress in quantum computers and offer a perspective on moving our PQC deadlines up to 2029.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Root Causes: A PKI and Security Podcast

Related Podcasts

Links

Stay Connected