Root Causes: A PKI and Security Podcast

Latest Episodes:

Root Causes 227: Let's Talk About Cookies May 27, 2022

Show notes

In this episode we explain the fundamentals of cookies and why, despite their obvious benefits, they present troublesome privacy concerns. We discuss the many ways web users can be tracked including cross-site cookies, tracking pixels, and browser fingerprinting.

Root Causes 226: The Six Benefits of SSH Certificates May 24, 2022

Show notes

In this third episode in our series on SSH keys, we identify the six main benefits of SSH certificates and how they mitigate the problems with SSH identified in earlier episodes.

Root Causes 225: The Difference Between Relying Parties and Certificate Consumers May 19, 2022

Show notes

Despite the similarity in their names, in the world of digital certificates a Relying Party and a Certificate Consumer are very different things. In this episode we define the four main roles in the public trust ecosystem: CA, Subscriber, Certificate Consumer, and Relying Party, with real-world examples.

Root Causes 224: The Five Problems with SSH Keys May 17, 2022

Show notes

In this follow-on to our earlier episode explaining SSH keys, we discuss the five problems SSH keys present to organizations using them. And we give a peek at how to solve these problems.

Root Causes 223: CT Log-Enabled Attacks on WordPress Sites May 11, 2022

Show notes

Attackers are using CT logs to identify brand new WordPress sites and install malware before upcoming security measures are in place. This attack is novel in how it exploits Certificate Transparency information to identify likely targets. In this episode we explain what is happening and why it's noteworthy.

Root Causes 222: Consolidation and PKI Solutions May 11, 2022

Show notes

Vendor consolidation is an important topic in IT security. As the scope and variety of threats continues to increase, we have seen a proliferation of point solutions and features, and a resulting desire to reduce that vendor footprint or at least facilitate using them together. In this episode we discuss this trend and how it specifically affects PKI and digital certificates.

Root Causes 221: What Are SSH Keys? May 04, 2022

Show notes

SSH (Secure Shell) keys are ubiquitous for authenticated access to Linux systems. In this first of three episodes we explain what these keys are and how they're used.

Root Causes 220: The Difference Between OTP and Passwordless May 02, 2022

Show notes

"Passwordless" is a hot term in the industry, and as a result many technology vendors are attaching their solutions to this term. In this episode we clarify the difference between OTP services and passwordless authentication.

Root Causes 219: New Quantum Cryptography Legislation Introduced Apr 26, 2022

Show notes

New proposed legislation in the US House of Representatives mandates that federal agencies must begin preparation for using the new quantum resistant cryptographic algorithms selected by NIST. This represents a major development in building a quantum safe digital world. In this episode we explain the proposed legislation and it's consequences.

Root Causes 218: PKI Nomenclature Oddities Apr 20, 2022

Show notes

Every technology space has its jargon. In this episode we go over some of the interesting, ambiguous, or amusing terms that are specific to the PKI and digital certificates industry.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Root Causes: A PKI and Security Podcast

Related Podcasts

Links

Stay Connected