393 episodes

Digital certificate industry veterans Tim Callan and Jason Soroko explore the issues surrounding digital identity, PKI, and cryptographic connections in today's dynamic and evolving computing world. Best practices in digital certificates are continually under pressure from technology trends, new laws and regulations, cryptographic advances, and the evolution of our computing architectures to be more virtual, agile, ubiquitous, and cloud-based. Jason and Tim (and the occasional guest subject matter expert) will help you stay current on developments in this essential technology platform and to understand the whys and wherefores of popular Public Key Infrastructures.

Root Causes: A PKI and Security Podcast Tim Callan and Jason Soroko

    • Technology
    • 5.0 • 12 Ratings

Digital certificate industry veterans Tim Callan and Jason Soroko explore the issues surrounding digital identity, PKI, and cryptographic connections in today's dynamic and evolving computing world. Best practices in digital certificates are continually under pressure from technology trends, new laws and regulations, cryptographic advances, and the evolution of our computing architectures to be more virtual, agile, ubiquitous, and cloud-based. Jason and Tim (and the occasional guest subject matter expert) will help you stay current on developments in this essential technology platform and to understand the whys and wherefores of popular Public Key Infrastructures.

    Root Causes 392: Chromium Issues a Quality Ultimatum

    Root Causes 392: Chromium Issues a Quality Ultimatum

    In the most recent CA/Browser Forum face-to-face meeting, the Google Chrome root program gave a presentation clearly defining its expectations for quality of incident reporting from CAs with an eye to where many CAs have been failing. We relate Chromium's statements and their significance.

    • 21 min
    Root Causes 391: 20 Percent of Web Visits Are PQC Enabled Today

    Root Causes 391: 20 Percent of Web Visits Are PQC Enabled Today

    Cloudflare research engineer Bas Westerbaan joins us to share his observations about post-quantum cryptography and what it does in the real world. We talk about the pragmatic needs of moving the internet for PQC and speculate about timelines for availability of PQC certificates.

    • 22 min
    Root Causes 390: Chromium Boosts Its Distrust Agility with a New Root Trust Deprecation

    Root Causes 390: Chromium Boosts Its Distrust Agility with a New Root Trust Deprecation

    A root trust deprecation highlights new Chrome functionality that enables more agile and less disruptive distrust events. We explain the significant of this event.

    • 21 min
    Root Causes 389: 2024 RSA Conference Wrap Up

    Root Causes 389: 2024 RSA Conference Wrap Up

    Jason and I do our annual RSA wrap-up. Trending segments include AI, Trust Centers, MFA, PQC, and more.

    • 27 min
    Root Causes 388: What Is the WebPKI?

    Root Causes 388: What Is the WebPKI?

    These days we frequently discuss "the WebPKI." But what does that really mean? In this episode we define the term and explain how this definition evolved over time. We give an inventory of a main components of the WebPKI and discuss what's required to become a CA.

    • 26 min
    Root Causes 387: What Is the Post-quantum Readiness of HSMs?

    Root Causes 387: What Is the Post-quantum Readiness of HSMs?

    We take a deep dive with return guest Bruno Coulliard on HSMs and the role they play in post-quantum cryptography (PQC).

    • 31 min

Customer Reviews

5.0 out of 5
12 Ratings

12 Ratings

PKI Princess ,

Keeping current with Root Causes

Thank you for providing “key” information on Pki and digital identity topics. It is an awesome way to stay current and learn how to protect digital assets in a constantly changing landscape.

ModernLifeIsWar ,

Thank you so much

Been in the systems engineering space for 10 years and I’ve continued to struggle with PKI and CA. The concept I get sure but execution in the organizations I’ve been apart of always looked like some disgusting, unscalable sidecar process that we all just had to do. This podcast has slowly filled those gaps in helping me understand soup to nuts what it’s all about, the risks, and what right looks like. Thanks guys! Love the show.

Top Podcasts In Technology

Acquired
Ben Gilbert and David Rosenthal
All-In with Chamath, Jason, Sacks & Friedberg
All-In Podcast, LLC
Lex Fridman Podcast
Lex Fridman
Catalyst with Shayle Kann
Latitude Media
Hard Fork
The New York Times
TED Radio Hour
NPR

You Might Also Like

Darknet Diaries
Jack Rhysider
Security Now (Audio)
TWiT
Self-Hosted
Jupiter Broadcasting
Malicious Life
Malicious Life
Smashing Security
Graham Cluley & Carole Theriault
Risky Business
Patrick Gray