Sectigo has released the results of its survey of IT professionals in charge of certificates to measure their readiness and preparation for 47-day maximum certificate term.  We go over the results.

Root Causes 520: How Prepared Are IT Teams for 47-day Certificates?

We begin to go over the results of Sectigo's recent survey of enterprises and their preparedness and plans for adopting Post Quantum Cryptography (PQC).

Root Causes 521: How Prepared Are Enterprises for PQC? (Part 1)

We complete our description and commentary on the results of Sectigo's survey of enterprise preparedness for Post Quantum Cryptography (PQC).

Root Causes 522: How Prepared Are Enterprises for PQC? (Part 2)

MPIC (Multi-perspective Issuance Corroboration) is soon to move into enforcement phase. In this episode we describe three configuration decisions that can force Domain Control Validation (DCV) to fail and tell you what to do about them before you have a problem.

Root Causes 523: Will Your Configuration Block MPIC DCV?

Three major changes are coming to the world of public certificates, all of which require major changes in how organizations deploy, renew, and manage their certificates.  These are 47-day SSL, PQC, and the deprecation of mTLS.  We describe the overlap between these efforts and how to combine them for better efficiency and project management.

Root Causes 524: How to Kill Three Birds with One Stone

A new CABF ballot proposal will eliminate all email- and phone-based DCV over the next few years.  We go into the details.

Root Causes 525: The End of Email-based DCV

Based on the ready availability of AI-based voice cloning, we declare voice biometric authentication to be utterly valueless.

Root Causes 526: Voice Biometrics Are Worthless

Client authentication using public TLS server certificates is on the deprecation path.  In this episode we go through the key dates in this deprecation.

Root Causes 527: Key Dates for the Deprecation of Public mTLS

A CA has incorrectly issued TLS certificates for the 1.1.1.1 and 2.2.2.2 IP addresses.  We go into the details.

Root Causes 528: Misissued SSL Certificate for 1.1.1.1

Verified Mark Certificates (VMC) now have a companion product for logos that are not registered trademarks, called a Common Mark Certificate (CMC). We explain the differences.

Root Causes 529: What Is a Common Mark Certificate?

Digital certificate industry veterans Tim Callan and Jason Soroko explore the issues surrounding digital identity, PKI, and cryptographic connections in today's dynamic and evolving computing world. Best practices in digital certificates are continually under pressure from technology trends, new laws and regulations, cryptographic advances, and the evolution of our computing architectures to be more virtual, agile, ubiquitous, and cloud-based. Jason and Tim (and the occasional guest subject matter expert) will help you stay current on developments in this essential technology platform and to understand the whys and wherefores of popular Public Key Infrastructures.

New tracks tagged #PKI