Root Causes: A PKI and Security Podcast

Latest Episodes:

Root Causes 147: Google Titan Secure Key Attack Feb 05, 2021

Show notes

Recent research reveals a possible attack that would allow the cloning of the Google Titan secure key. Join our hosts and guest Alan Grau as they describe this attack and its implications for Titan and other secure keys.

Root Causes 146 : Congolese ccTLD Takeover Feb 01, 2021

Show notes

A white hat researcher recently took over .cd, the Democratic Republic of the Congo's ccTLD. The implications of taking over a top-level TLD are of course staggering. Join our hosts as we describe how this feat was accomplished and the many malicious activities that could occur under such circumstances.

Root Causes 145: Google Chrome to Distrust CA Camerfirma Jan 28, 2021

Show notes

A few days ago Google announced that Chrome will distrust Spanish public CA Camerfirma in its upcoming build 90. Our hosts go over the history of browsers distrusting public CAs and explain the reasons for (and implications of) this decision.

Root Causes 144: Whatever Happened to the Green Address Bar? Jan 25, 2021

Show notes

For more than a decade browsers displayed the "green address bar" on sites that had undergone the high authentication required for EV SSL certificates. But in recent years the identity information in the browser has has shrunk, lost its color, and in some cases disappeared entirely. In this episode our hosts walk you through the history of how the green address bar came to be and how browsers gradually reduced and then removed it.

Root Causes 143: The Four Pillars of Certificate Automation Jan 21, 2021

Show notes

In this episode our hosts explain the Four Pillars of Certificate Automation: deploy, discover, revoke/replace, and renew. They detail what these pillars entail and why they're important. They also discuss the umbrella capability of visibility, which affects all four pillars.

Root Causes 142: Removing Street Address and Postal Code from Public Certificates Jan 18, 2021

Show notes

On March 1 Sectigo will remove street address and postal/zip code information from its public certificates of all types. Our hosts explain the reasons for and advantages of this upcoming change, along with answers to some of the common questions we receive.

Root Causes 141: The Case for Shorter Certificate Lifespans Jan 11, 2021

Show notes

Recent years have seen multiple reductions in the maximum term for public SSL certificates. Our hosts are joined by guest Nick France to discuss the benefits of shorter certificate lifespans for both public and private CAs.

Root Causes 140: SSL Attacks Using BGP (Border Gateway Protocol) Jan 06, 2021

Show notes

BGP, or Border Gateway Protocol, controls traffic routing on the internet. Real and theoretical attacks over the years have been revealed against BGP with varying levels of success, including recent research on how BGP attacks can be used to improperly obtain DV certificates. Our hosts explain them along with recent industry actions intended to thwart such attacks.

Root Causes 139: Exposed Private Keys in CSR Submissions Jan 03, 2021

Show notes

Public CAs recently have discovered a repeated error whereby certificate subscribers accidentally include the private key along with CSR submissions. Our hosts break down this phenomenon and its implications.

Root Causes 138: IoT Cybersecurity Improvement Act of 2020 Dec 27, 2020

Show notes

A new US law called the IoT Cybersecurity Improvement Act of 2020 creates security requirements for IoT devices sold into the US government. Join us as we explain these new requirements and why this law's reach is likely to extend further than the US governmental procurement process.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Root Causes: A PKI and Security Podcast

Related Podcasts

Links

Stay Connected