March 2023
- Towards Greater Accountability: A Proposal for CA Issuance Decision Logs
It took us a long time, but objectively, Certificate Transparency is a success. We had to make numerous technology tradeoffs to make it something that the CAs would adopt, some of which introduced problems that took even…
- Exploring the Potential of Domain Control Notaries for MPDV in WebPKI
In an earlier post on the Role of Multiple Perspective Domain Control Validation (MPDV) in the WebPKI, I discussed how there was an opportunity for CAs to work together to reduce the cost of meeting the upcoming…
- Strengthening Domain Control Verification: The Role of Multiple Perspectives and Collaboration
The security and stability of encryption on the web rely on robust domain control verification. Certificate Authorities in the WebPKI are increasingly facing attacks that exploit weaknesses in the Border Gateway Protocol…
- Key Management and preparing for the Crypto Apocalypse
Today, keeping sensitive information secure is more critical than ever. Although I'm not overly concerned about the looming threat of quantum computers breaking cryptography, I do worry about our approach to key…
- The Growing Security Concerns of Modern Firmware and the Need for Change.
Today's firmware is larger and more complex than ever before. In 1981, the IBM PC BIOS was a mere 8 KB, but now UEFI, even without considering machines with BMCs, can be 32 MB or even larger! To illustrate the magnitude…