Root Causes: A PKI and Security Podcast

By Tim Callan and Jason SorokoBusiness Science Technology

Root Causes: A PKI and Security Podcast episodes

July 17 Root Causes 641: What Is SPIRE?
In our episode 640 we defined SPIFFE, which provides digital identity for agentic workloads. In this episode we explain SPIRE (SPIFFE Runtime Environment), the SPIFFE certificate provisioning protocol.
6 min
July 15 Root Causes 640: What is SPIFFE?
SPIFFE (Secure Production Identity Framework for Everyone) is a standard for digital identity for agentic workloads. In this episode we explain.
5 min
July 10 Root Causes 639: Fighting Static API Key Spillage Is Like Fighting Gravity
Static API keys are a common security practice. In this episode we discuss the risk of these keys being revealed, including directly by the AIs that use them.
9 min
July 08 Root Causes 638: Catfishing
Tim shares his very personal experience with would-be catfishers and we talk about how AI is set to change the catfishing attack.
22 min
July 06 Root Causes 637: Is It Time to Get Rid of EV SSL?
The Baseline Requirements, CT logs, the Bugzilla Bloodbath, shortening certificate lifespans, all these trends serve to enforce a high level of quality and predictability across WebPKI certificates. Nearly twenty years after the introduction of EV SSL, we ask if it has served its purpose and should be retired.
11 min
July 02 Root Causes 636: The Future of Crypto Agility
Dustin Moody of NIST joins us to talk about the evolution of standardized cryptography beyond the current PQC efforts. Topics include maintaining visibility on cryptography presently in use, 50 years of RSA, and cryptographic heterogeny.
10 min
June 29 Root Causes 635: Do We Need to Get Rid of ECC?
Bas Westerbaan of Cloudflare joins us to discuss recent information that heightens concerns about Elliptic Curve Cryptography (ECC) and its vulnerability to a cryptographically relevant quantum computer (CRQC). We pose the question do we need to deprecate ECC in advance of our migration to ML-DSA and other PQC algorithms.
10 min
June 26 Root Causes 634: White House Executive Order Accelerates PQC Deployment
A new Executive Order (EO) moves the deadline for ML-DSA deployment up to 2031. We talk about why this happened and its implications on government, the technology industry, and enterprises around the globe.
13 min
June 24 Root Causes 633: ETSI PQC Conference Wrap Up
We are freshly returned from the 2026 ETSI PQC Conference. We give a debrief on the conference, including the difference between post quantum cryptography (PQC) and quantum key distribution (QKD), the algorithmic zoo, PQC for blockchain, the Dunning Kruger Effect, and cryptographic Frogger.
17 min
June 22 Root Causes 632: Gartner Risk and Security 2026 Wrap Up
We recently attended the Gartner Risk and Security conference for 2026, where we observed a great deal of attention on not only AI but also post quantum cryptography (PQC). Join us as we share the key takeaways.
20 min

About Root Causes: A PKI and Security Podcast

From the publisher's feed

Digital certificate industry veterans Tim Callan and Jason Soroko explore the issues surrounding digital identity, PKI, and cryptographic connections in today's dynamic and evolving computing world.…