July 2024
- Exploring Requirements for Timelines Certificate Problem Reports and Revocations
Today, DigiCert's mass revocation is in the news, so I thought it would be worthwhile to explore the rules for a CA when it comes to revoking a subscriber certificate and the choices and constraints a CA faces in…
- HSMs Largely Protect Keys from Theft Rather Than Abuse
HSMs were designed to protect keys from theft and to move those keys into a different security domain than the code that uses those keys. The workloads using these HSMs use credentials or, worse, shared secrets that are…
- Turning Catastrophe into Opportunity: Improving Processes and Vendor Accountability
We often hear about customers not wanting to deploy agents, usually citing the rationale that while each one may only consume a bit of memory and CPU the sum of them slowly but surely grind systems to a halt. The real…
- Reading the Tea Leaves: What Led to the Largest IT Outage in History
Last night, on July 18, 2024, a significant IT outage disrupted businesses worldwide, affecting airlines, financial services, TV broadcasters, and more. Some have described this outage as potentially the “largest IT…
- Content is King in Phishing and the Role of Publicly Trusted CAs
Phishing attacks often begin with a seemingly simple email. These emails appear to be from trusted sources and include links to fake websites or messages that create a false sense of urgency, prompting users to act…
- Global Consistency for AKD: Using Armored Witness to Prevent Split Views
By Al Cutter and Ryan Hurst
- Timeless Farm Wisdom
My father grew up on a small farm in eastern Washington. They say you can take the boy out of the farm, but you can’t take the farm out of the boy. As a kid, I was always hearing farm life sayings from my grandfather and…