<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1"><url><loc>https://unmitigatedrisk.com/</loc></url><url><loc>https://unmitigatedrisk.com/2006/</loc></url><url><loc>https://unmitigatedrisk.com/2006/12/</loc></url><url><loc>https://unmitigatedrisk.com/2006/12/understanding-server-gated-cryptography/</loc></url><url><loc>https://unmitigatedrisk.com/2007/</loc></url><url><loc>https://unmitigatedrisk.com/2007/04/</loc></url><url><loc>https://unmitigatedrisk.com/2007/04/asking-the-drunk-if-they-are-drunk/</loc></url><url><loc>https://unmitigatedrisk.com/2007/08/</loc></url><url><loc>https://unmitigatedrisk.com/2007/08/how-to-clear-the-ie-ssl-cache-from-js/</loc></url><url><loc>https://unmitigatedrisk.com/2007/08/what-is-a-wildcard-certificate-and-why-are-they-a-bad-idea/</loc></url><url><loc>https://unmitigatedrisk.com/2008/</loc></url><url><loc>https://unmitigatedrisk.com/2008/11/</loc></url><url><loc>https://unmitigatedrisk.com/2008/11/how-to-tell-if-a-volume-is-bitlocker-protected-with-tpm-and-pin/</loc></url><url><loc>https://unmitigatedrisk.com/2010/</loc></url><url><loc>https://unmitigatedrisk.com/2010/04/</loc></url><url><loc>https://unmitigatedrisk.com/2010/04/generic-identity-device-specification-published/</loc></url><url><loc>https://unmitigatedrisk.com/2010/05/</loc></url><url><loc>https://unmitigatedrisk.com/2010/05/the-contrition-of-a-security-practitioner/</loc></url><url><loc>https://unmitigatedrisk.com/2011/</loc></url><url><loc>https://unmitigatedrisk.com/2011/08/</loc></url><url><loc>https://unmitigatedrisk.com/2011/08/how-to-clear-the-cryptnet-cache-in-windows-7/</loc></url><url><loc>https://unmitigatedrisk.com/2011/08/how-to-mitigate-the-risk-of-the-diginotar-google-com-ssl-certificate/</loc></url><url><loc>https://unmitigatedrisk.com/2012/</loc></url><url><loc>https://unmitigatedrisk.com/2012/01/</loc></url><url><loc>https://unmitigatedrisk.com/2012/01/leaving-microsoft/</loc></url><url><loc>https://unmitigatedrisk.com/2012/02/</loc></url><url><loc>https://unmitigatedrisk.com/2012/02/least-privilege-and-subordinate-certificate-authorities/</loc></url><url><loc>https://unmitigatedrisk.com/2012/02/my-first-post-since-joining-globalsign/</loc></url><url><loc>https://unmitigatedrisk.com/2012/02/ssltls-deployment-best-practices/</loc></url><url><loc>https://unmitigatedrisk.com/2012/03/</loc></url><url><loc>https://unmitigatedrisk.com/2012/03/browser-revocation-behavior-needs-improvement/</loc></url><url><loc>https://unmitigatedrisk.com/2012/03/hard-revocation-checking-and-why-its-not-here-yet/</loc></url><url><loc>https://unmitigatedrisk.com/2012/03/how-to-do-ocsp-requests-using-openssl-and-curl/</loc></url><url><loc>https://unmitigatedrisk.com/2012/03/ocsp-responder-performance-needs-improvement/</loc></url><url><loc>https://unmitigatedrisk.com/2012/03/using-openssl-to-create-a-test-qualified-subordination-pki-hierarchy/</loc></url><url><loc>https://unmitigatedrisk.com/2012/04/</loc></url><url><loc>https://unmitigatedrisk.com/2012/04/always-on-ssl-aossl-whitepaper-published/</loc></url><url><loc>https://unmitigatedrisk.com/2012/04/attending-workshop-on-improving-the-availability-of-revocation-information/</loc></url><url><loc>https://unmitigatedrisk.com/2012/04/my-top-pkitls-related-issues-in-firefox/</loc></url><url><loc>https://unmitigatedrisk.com/2012/05/</loc></url><url><loc>https://unmitigatedrisk.com/2012/05/getting-beyond-1-how-do-we-increase-the-use-of-ssl/</loc></url><url><loc>https://unmitigatedrisk.com/2012/05/lightning-talk-on-the-improving-the-availability-of-revocation-information-workshop/</loc></url><url><loc>https://unmitigatedrisk.com/2012/05/transcript-for-panel/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/100/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/a-look-at-the-new-windows-update-ssl-certificates/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/a-revised-look-at-the-new-windows-update-ssl-configuration/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/flame-and-certificate-revocation/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/flame-was-just-one-use-of-the-terminal-services-licensing-pki/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/how-long-were-we-at-risk-from-the-terminal-services-licensing-pki/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/how-one-typically-verifies-code-comes-from-microsoft/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/measuring-ocsp-responder-performance-with-powershell/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/msrc-2718704-and-nested-eku-enforcement/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/msrc-2718704-and-terminal-services-license-certificates/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/msrc-2718704-and-the-age-of-the-rouge-certificates/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/msrc-2718704-and-the-terminal-services-licensing-protocol/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/ocsp-stapling-in-apache-2/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/ocsp-stapling-in-iis/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/pulse-data-publicly-availible/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/putting-ocsp-on-a-cdn/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/redirecting-http-to-https-in-apache/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/redirecting-http-to-https-in-iis/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/revocation-repositories-ipv6-support-message-size-and-performance/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/rsa-keys-under-1024-bits-and-you/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/setting-http-headers-with-openssl-and-the-ocsp-test-client/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/the-tale-of-two-pkis/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/using-monitis-to-monitor-ocsp-and-crl-performance/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/was-the-flame-wsus-attack-caused-just-because-of-the-use-of-md5/</loc></url><url><loc>https://unmitigatedrisk.com/2012/06/whats-your-organizations-policy-on-ssl/</loc></url><url><loc>https://unmitigatedrisk.com/2012/07/</loc></url><url><loc>https://unmitigatedrisk.com/2012/07/cryptoapi-revocation-checking-ocsp-and-the-unknown-certstatus/</loc></url><url><loc>https://unmitigatedrisk.com/2012/07/government-cas-in-the-microsoft-root-program/</loc></url><url><loc>https://unmitigatedrisk.com/2012/07/priming-the-cryptoapi-url-cache-with-an-ocsp-response/</loc></url><url><loc>https://unmitigatedrisk.com/2012/07/serving-ocsp-post-responses-on-a-cdn/</loc></url><url><loc>https://unmitigatedrisk.com/2012/07/wanted-information-technology-manager-tokyo/</loc></url><url><loc>https://unmitigatedrisk.com/2012/07/wanted-it-analyst-tokyo/</loc></url><url><loc>https://unmitigatedrisk.com/2012/07/wanted-network-and-system-specialist-singapore/</loc></url><url><loc>https://unmitigatedrisk.com/2012/07/wanted-senior-software-engineer-back-end-manila/</loc></url><url><loc>https://unmitigatedrisk.com/2012/07/wanted-senior-software-engineer-front-end/</loc></url><url><loc>https://unmitigatedrisk.com/2012/07/wanted-senior-software-engineer-lead-manila/</loc></url><url><loc>https://unmitigatedrisk.com/2012/07/wanted-software-engineer/</loc></url><url><loc>https://unmitigatedrisk.com/2012/08/</loc></url><url><loc>https://unmitigatedrisk.com/2012/08/how-to-get-your-own-oid-arc/</loc></url><url><loc>https://unmitigatedrisk.com/2012/08/updated-my-script-for-qualified-subordination-testing/</loc></url><url><loc>https://unmitigatedrisk.com/2012/08/using-ecc-keys-in-x509-certificates/</loc></url><url><loc>https://unmitigatedrisk.com/2012/08/using-sha2-based-signatures-in-x509-certificates/</loc></url><url><loc>https://unmitigatedrisk.com/2012/08/xp-and-the-undefined-name-constraints/</loc></url><url><loc>https://unmitigatedrisk.com/2012/09/</loc></url><url><loc>https://unmitigatedrisk.com/2012/09/a-look-at-expired-certificates/</loc></url><url><loc>https://unmitigatedrisk.com/2012/09/a-look-at-revoked-certificates/</loc></url><url><loc>https://unmitigatedrisk.com/2012/09/a-look-at-untrusted-certificates/</loc></url><url><loc>https://unmitigatedrisk.com/2012/09/algorithms-key-size-and-digital-certificates/</loc></url><url><loc>https://unmitigatedrisk.com/2012/09/how-to-tell-dv-and-ov-certificates-apart/</loc></url><url><loc>https://unmitigatedrisk.com/2012/09/logo-for-x509labs/</loc></url><url><loc>https://unmitigatedrisk.com/2012/09/restful-x509-crl-and-ocsp-to-json-web-service/</loc></url><url><loc>https://unmitigatedrisk.com/2012/09/windows-xp-and-name-constraints/</loc></url><url><loc>https://unmitigatedrisk.com/2012/10/</loc></url><url><loc>https://unmitigatedrisk.com/2012/10/a-quick-look-at-ssl-performance/</loc></url><url><loc>https://unmitigatedrisk.com/2012/10/reading-ocspreport-and-crlreport-at-x509labs-com/</loc></url><url><loc>https://unmitigatedrisk.com/2012/11/</loc></url><url><loc>https://unmitigatedrisk.com/2012/11/how-facebook-can-avoid-losing-100m-in-revenue-when-they-switch-to-always-on-ssl-2/</loc></url><url><loc>https://unmitigatedrisk.com/2012/11/making-a-windows-smartcard-login-certificate-with-openssl/</loc></url><url><loc>https://unmitigatedrisk.com/2012/11/priming-the-ocsp-cache-in-nginx/</loc></url><url><loc>https://unmitigatedrisk.com/2012/11/revocation-checking-chrome-and-crlsets/</loc></url><url><loc>https://unmitigatedrisk.com/2012/11/using-capicom-on-windows-x64/</loc></url><url><loc>https://unmitigatedrisk.com/2012/11/what-is-the-status-of-revocation-checking-in-browsers/</loc></url><url><loc>https://unmitigatedrisk.com/2012/12/</loc></url><url><loc>https://unmitigatedrisk.com/2012/12/ssl-3-0-usage-in-the-wild/</loc></url><url><loc>https://unmitigatedrisk.com/2012/12/understanding-windows-automatic-root-update/</loc></url><url><loc>https://unmitigatedrisk.com/2013/</loc></url><url><loc>https://unmitigatedrisk.com/2013/02/</loc></url><url><loc>https://unmitigatedrisk.com/2013/02/abstract-using-least-privileged-design-principals-to-improve-trust-in-the-online-marketplace/</loc></url><url><loc>https://unmitigatedrisk.com/2013/02/abtstract-revocation-reality-and-the-path-to-becoming-effective/</loc></url><url><loc>https://unmitigatedrisk.com/2013/02/is-ssl-broken/</loc></url><url><loc>https://unmitigatedrisk.com/2013/03/</loc></url><url><loc>https://unmitigatedrisk.com/2013/03/advanced-troubleshooting-of-certificate-validation-related-problems-on-windows-part-1/</loc></url><url><loc>https://unmitigatedrisk.com/2013/03/advanced-troubleshooting-of-certificate-validation-related-problems-on-windows-part-2/</loc></url><url><loc>https://unmitigatedrisk.com/2013/03/microsoft-root-program-and-excel/</loc></url><url><loc>https://unmitigatedrisk.com/2013/04/</loc></url><url><loc>https://unmitigatedrisk.com/2013/04/a-look-at-revocation-repository-uptime/</loc></url><url><loc>https://unmitigatedrisk.com/2013/04/average-crl-size-and-download-time/</loc></url><url><loc>https://unmitigatedrisk.com/2013/04/certificate-based-mozilla-persona-idp/</loc></url><url><loc>https://unmitigatedrisk.com/2013/04/how-not-to-collect-sensitive-information/</loc></url><url><loc>https://unmitigatedrisk.com/2013/04/why-i-built-the-revocation-report/</loc></url><url><loc>https://unmitigatedrisk.com/2013/05/</loc></url><url><loc>https://unmitigatedrisk.com/2013/05/example-nginx-ssl-configuration/</loc></url><url><loc>https://unmitigatedrisk.com/2013/05/how-to-get-the-latest-stable-openssl-apache-and-nginx/</loc></url><url><loc>https://unmitigatedrisk.com/2013/06/</loc></url><url><loc>https://unmitigatedrisk.com/2013/06/deploying-forward-secrecy-on-redhat-centos-or-fedora-based-systems/</loc></url><url><loc>https://unmitigatedrisk.com/2013/06/deploying-ssl-beyond-the-certificate-and-cipher-suites/</loc></url><url><loc>https://unmitigatedrisk.com/2013/06/example-iis-ssl-tls-configuration/</loc></url><url><loc>https://unmitigatedrisk.com/2013/06/how-to-build-your-own-openssl/</loc></url><url><loc>https://unmitigatedrisk.com/2013/06/how-to-do-a-quick-and-dirty-benchmark-on-a-smart-card/</loc></url><url><loc>https://unmitigatedrisk.com/2013/06/what-you-need-to-know-about-configuring-ssl/</loc></url><url><loc>https://unmitigatedrisk.com/2013/07/</loc></url><url><loc>https://unmitigatedrisk.com/2013/07/dcom-and-your-firewall/</loc></url><url><loc>https://unmitigatedrisk.com/2013/07/how-to-redirect-posts-based-on-their-content-type-in-nginx/</loc></url><url><loc>https://unmitigatedrisk.com/2013/07/strategies-for-deploying-2fa/</loc></url><url><loc>https://unmitigatedrisk.com/2013/07/what-authentication-methods-does-windows-support-for-interactive-logon/</loc></url><url><loc>https://unmitigatedrisk.com/2013/07/windows-certificate-enrollment-protocols/</loc></url><url><loc>https://unmitigatedrisk.com/2013/08/</loc></url><url><loc>https://unmitigatedrisk.com/2013/08/the-soon-to-be-not-so-common-name/</loc></url><url><loc>https://unmitigatedrisk.com/2013/09/</loc></url><url><loc>https://unmitigatedrisk.com/2013/09/how-to-generate-and-send-a-timestamp-request-for-authenticode/</loc></url><url><loc>https://unmitigatedrisk.com/2013/09/how-to-generate-and-send-an-rfc3161-timestamp-with-openssl-and-curl/</loc></url><url><loc>https://unmitigatedrisk.com/2013/09/the-story-of-the-windows-biometric-framework/</loc></url><url><loc>https://unmitigatedrisk.com/2013/09/the-weaknesses-of-fingerprint-based-authentication/</loc></url><url><loc>https://unmitigatedrisk.com/2013/09/thoughts-on-apple-and-fingerprint-based-biometrics/</loc></url><url><loc>https://unmitigatedrisk.com/2013/10/</loc></url><url><loc>https://unmitigatedrisk.com/2013/10/why-so-many-intermediate-cas/</loc></url><url><loc>https://unmitigatedrisk.com/2014/</loc></url><url><loc>https://unmitigatedrisk.com/2014/04/</loc></url><url><loc>https://unmitigatedrisk.com/2014/04/bitcoin-paper-wallets-and-digital-backups/</loc></url><url><loc>https://unmitigatedrisk.com/2014/04/creating-a-self-signed-certificate-in-pki-js/</loc></url><url><loc>https://unmitigatedrisk.com/2014/04/generating-signed-messages-using-cms-and-pki-js/</loc></url><url><loc>https://unmitigatedrisk.com/2014/04/insurance-and-bitcoin/</loc></url><url><loc>https://unmitigatedrisk.com/2014/04/keeping-an-eye-on-your-bitcoin-keys/</loc></url><url><loc>https://unmitigatedrisk.com/2014/04/keeping-long-term-passwords-secured/</loc></url><url><loc>https://unmitigatedrisk.com/2014/04/must-staple-and-pki-js/</loc></url><url><loc>https://unmitigatedrisk.com/2014/04/potential-projects-for-pki-js/</loc></url><url><loc>https://unmitigatedrisk.com/2014/04/protecting-bitcoin-keys-with-hardware/</loc></url><url><loc>https://unmitigatedrisk.com/2014/04/the-bias-of-experience-and-ignorance-of-youth/</loc></url><url><loc>https://unmitigatedrisk.com/2014/04/webcrypto-and-pki/</loc></url><url><loc>https://unmitigatedrisk.com/2014/05/</loc></url><url><loc>https://unmitigatedrisk.com/2014/05/a-bitcoin-risks-mind-map/</loc></url><url><loc>https://unmitigatedrisk.com/2014/05/attacker-mind-map-for-bitcoin/</loc></url><url><loc>https://unmitigatedrisk.com/2014/05/beyond-builders-defenders-breakers/</loc></url><url><loc>https://unmitigatedrisk.com/2014/05/bitcoin-and-the-credit-card-ecosystem/</loc></url><url><loc>https://unmitigatedrisk.com/2014/05/certificate-path-building-in-pkijs/</loc></url><url><loc>https://unmitigatedrisk.com/2014/05/challenges-of-bitcoin-use-as-a-payment-technology/</loc></url><url><loc>https://unmitigatedrisk.com/2014/05/effectiveness-of-security-controls-in-physical-security/</loc></url><url><loc>https://unmitigatedrisk.com/2014/05/hardware-based-key-management-and-bitcoin-hardware-based-key-management/</loc></url><url><loc>https://unmitigatedrisk.com/2014/05/if-you-dont-hold-it-you-dont-own-it/</loc></url><url><loc>https://unmitigatedrisk.com/2014/05/liquidity-risk-management-in-bitcoin/</loc></url><url><loc>https://unmitigatedrisk.com/2014/05/piperwallet-first-impressions/</loc></url><url><loc>https://unmitigatedrisk.com/2014/05/proving-assets-under-management-is-important-but-it-is-not-an-audit/</loc></url><url><loc>https://unmitigatedrisk.com/2014/05/swift-chips-ach-fedwire-and-bitcoin/</loc></url><url><loc>https://unmitigatedrisk.com/2014/05/verifying-a-bitcoin-wallet-address/</loc></url><url><loc>https://unmitigatedrisk.com/2014/06/</loc></url><url><loc>https://unmitigatedrisk.com/2014/06/cupid-and-understanding-your-exposure/</loc></url><url><loc>https://unmitigatedrisk.com/2014/07/</loc></url><url><loc>https://unmitigatedrisk.com/2014/07/smart-cards-pcsc-and-chrome/</loc></url><url><loc>https://unmitigatedrisk.com/2014/07/smart-cards-piv-bitcoin-and-secp256k1/</loc></url><url><loc>https://unmitigatedrisk.com/2014/07/two-factor-authentications-with-bitgo-and-coinbase/</loc></url><url><loc>https://unmitigatedrisk.com/2014/07/verifying-a-bitcoin-wallet-address-tutorial/</loc></url><url><loc>https://unmitigatedrisk.com/2014/08/</loc></url><url><loc>https://unmitigatedrisk.com/2014/08/what-are-some-upsides-of-googless-sha1-deprecation-plan/</loc></url><url><loc>https://unmitigatedrisk.com/2014/08/what-will-chromes-sha1-early-warning-look-like/</loc></url><url><loc>https://unmitigatedrisk.com/2014/08/why-might-you-have-a-certificate-with-a-sha1-based-signature-in-its-chain-that-is-valid-beyond-the-sunset-date/</loc></url><url><loc>https://unmitigatedrisk.com/2014/09/</loc></url><url><loc>https://unmitigatedrisk.com/2014/09/the-first-web-server-and-the-meaning-of-the-ssl-lock/</loc></url><url><loc>https://unmitigatedrisk.com/2014/10/</loc></url><url><loc>https://unmitigatedrisk.com/2014/10/how-did-i-get-involved-in-pki/</loc></url><url><loc>https://unmitigatedrisk.com/2015/</loc></url><url><loc>https://unmitigatedrisk.com/2015/05/</loc></url><url><loc>https://unmitigatedrisk.com/2015/05/a-look-at-short-lived-certificates-keys-and-the-relevance-of-fips-140-2/</loc></url><url><loc>https://unmitigatedrisk.com/2015/05/browser-bound-certificates/</loc></url><url><loc>https://unmitigatedrisk.com/2015/05/farm-boy-sensibilities-and-the-importance-of-contracts/</loc></url><url><loc>https://unmitigatedrisk.com/2015/05/has-identity-verification-on-the-web-become-a-glass-ceiling/</loc></url><url><loc>https://unmitigatedrisk.com/2015/05/key-management-and-key-lifetime/</loc></url><url><loc>https://unmitigatedrisk.com/2015/05/my-thoughts-on-lets-encrypt/</loc></url><url><loc>https://unmitigatedrisk.com/2015/05/removing-friction-from-online-signatures/</loc></url><url><loc>https://unmitigatedrisk.com/2015/05/wet-dry-electronic-digital-and-hybrid-signatures/</loc></url><url><loc>https://unmitigatedrisk.com/2015/06/</loc></url><url><loc>https://unmitigatedrisk.com/2015/06/blockchain-digital-signatures-and-identity-2/</loc></url><url><loc>https://unmitigatedrisk.com/2015/06/help-wanted-apprentice-to-learn-trade/</loc></url><url><loc>https://unmitigatedrisk.com/2015/06/the-bright-side-of-the-dark-side/</loc></url><url><loc>https://unmitigatedrisk.com/2015/06/what-makes-an-enforceable-electronic-signature/</loc></url><url><loc>https://unmitigatedrisk.com/2015/07/</loc></url><url><loc>https://unmitigatedrisk.com/2015/07/uniform-electronic-legal-material-act-and-digital-signatures/</loc></url><url><loc>https://unmitigatedrisk.com/2015/08/</loc></url><url><loc>https://unmitigatedrisk.com/2015/08/offline-applications-and-webcrypto/</loc></url><url><loc>https://unmitigatedrisk.com/2015/09/</loc></url><url><loc>https://unmitigatedrisk.com/2015/09/paper-in-a-digital-world/</loc></url><url><loc>https://unmitigatedrisk.com/2015/10/</loc></url><url><loc>https://unmitigatedrisk.com/2015/10/ecc-nsa-and-crypto-agility/</loc></url><url><loc>https://unmitigatedrisk.com/2015/10/pkcs-11-and-javascript-and-node/</loc></url><url><loc>https://unmitigatedrisk.com/2015/10/pkijs-and-trust-lists/</loc></url><url><loc>https://unmitigatedrisk.com/2015/11/</loc></url><url><loc>https://unmitigatedrisk.com/2015/11/certificate-based-encryption-in-pdfs/</loc></url><url><loc>https://unmitigatedrisk.com/2015/11/graphene-cli/</loc></url><url><loc>https://unmitigatedrisk.com/2015/12/</loc></url><url><loc>https://unmitigatedrisk.com/2015/12/pkcs12-needs-another-update/</loc></url><url><loc>https://unmitigatedrisk.com/2016/</loc></url><url><loc>https://unmitigatedrisk.com/2016/01/</loc></url><url><loc>https://unmitigatedrisk.com/2016/01/escaping-the-same-origin-policy-for-pkijs/</loc></url><url><loc>https://unmitigatedrisk.com/2016/01/things-we-think-are-true-but-are-not/</loc></url><url><loc>https://unmitigatedrisk.com/2016/01/understanding-risks-and-avoiding-fud/</loc></url><url><loc>https://unmitigatedrisk.com/2016/05/</loc></url><url><loc>https://unmitigatedrisk.com/2016/05/xmldsig-and-xades-in-the-browser-and-node/</loc></url><url><loc>https://unmitigatedrisk.com/2017/</loc></url><url><loc>https://unmitigatedrisk.com/2017/03/</loc></url><url><loc>https://unmitigatedrisk.com/2017/03/do-pdfs-have-to-be-so-frustrating/</loc></url><url><loc>https://unmitigatedrisk.com/2017/03/how-do-you-show-someone-they-are-important-to-you/</loc></url><url><loc>https://unmitigatedrisk.com/2017/04/</loc></url><url><loc>https://unmitigatedrisk.com/2017/04/cas-and-ssl-and-phishing-oh-my/</loc></url><url><loc>https://unmitigatedrisk.com/2017/04/digital-signatures-and-the-fallacy-of-good-cheap-and-fast/</loc></url><url><loc>https://unmitigatedrisk.com/2017/04/revocation-reasons-dont-make-sense-for-the-the-webpki-of-today/</loc></url><url><loc>https://unmitigatedrisk.com/2017/04/secondary-effects/</loc></url><url><loc>https://unmitigatedrisk.com/2017/05/</loc></url><url><loc>https://unmitigatedrisk.com/2017/05/how-to-keep-a-secret/</loc></url><url><loc>https://unmitigatedrisk.com/2017/05/it-is-my-turn-or-short-lived-certificates-part-2/</loc></url><url><loc>https://unmitigatedrisk.com/2017/05/lets-talk-revocation-checking-lets-talk-about-you-and-me/</loc></url><url><loc>https://unmitigatedrisk.com/2017/05/my-response-to-his-response-to-my-response-or-short-lived-certificates-part-3/</loc></url><url><loc>https://unmitigatedrisk.com/2017/05/why-bother-with-short-lived-certificates-and-keys/</loc></url><url><loc>https://unmitigatedrisk.com/2017/07/</loc></url><url><loc>https://unmitigatedrisk.com/2017/07/positive-trust-indicators-and-ssl/</loc></url><url><loc>https://unmitigatedrisk.com/2018/</loc></url><url><loc>https://unmitigatedrisk.com/2018/03/</loc></url><url><loc>https://unmitigatedrisk.com/2018/03/risk-variance-and-managing-risk/</loc></url><url><loc>https://unmitigatedrisk.com/2018/03/the-evolution-of-security-thinking/</loc></url><url><loc>https://unmitigatedrisk.com/2018/06/</loc></url><url><loc>https://unmitigatedrisk.com/2018/06/what-is-fortify-and-how-does-it-work/</loc></url><url><loc>https://unmitigatedrisk.com/2018/06/what-value-can-a-third-party-provide-users-when-browsing-the-web/</loc></url><url><loc>https://unmitigatedrisk.com/2019/</loc></url><url><loc>https://unmitigatedrisk.com/2019/01/</loc></url><url><loc>https://unmitigatedrisk.com/2019/01/google-wifi-nest-cameras-vs-ubiquity-for-home-use/</loc></url><url><loc>https://unmitigatedrisk.com/2019/01/why-i-chose-unifi-vs-amplifi-hd/</loc></url><url><loc>https://unmitigatedrisk.com/2019/05/</loc></url><url><loc>https://unmitigatedrisk.com/2019/05/secure-privacy-preserving-key-discovery-for-end-to-end-encryption/</loc></url><url><loc>https://unmitigatedrisk.com/2019/05/software-supply-chain-risk-mitigation/</loc></url><url><loc>https://unmitigatedrisk.com/2019/10/</loc></url><url><loc>https://unmitigatedrisk.com/2019/10/safes-and-transparency/</loc></url><url><loc>https://unmitigatedrisk.com/2021/</loc></url><url><loc>https://unmitigatedrisk.com/2021/02/</loc></url><url><loc>https://unmitigatedrisk.com/2021/02/information-system-security-and-how-little-things-have-changed/</loc></url><url><loc>https://unmitigatedrisk.com/2021/03/</loc></url><url><loc>https://unmitigatedrisk.com/2021/03/accountability-and-transparency-in-modern-systems/</loc></url><url><loc>https://unmitigatedrisk.com/2021/03/how-is-acme-different-than-xcep-wstep-anyway/</loc></url><url><loc>https://unmitigatedrisk.com/2021/03/the-next-decade-of-public-key-infrastructure/</loc></url><url><loc>https://unmitigatedrisk.com/2021/09/</loc></url><url><loc>https://unmitigatedrisk.com/2021/09/cryptographic-controls-and-feature-trade-offs/</loc></url><url><loc>https://unmitigatedrisk.com/2021/09/evolution-of-privacy-governance-and-how-cryptographic-controls-can-help/</loc></url><url><loc>https://unmitigatedrisk.com/2022/</loc></url><url><loc>https://unmitigatedrisk.com/2022/07/</loc></url><url><loc>https://unmitigatedrisk.com/2022/07/webpki-ecosystem-and-how-to-measure-it/</loc></url><url><loc>https://unmitigatedrisk.com/2022/08/</loc></url><url><loc>https://unmitigatedrisk.com/2022/08/getting-an-ev-code-signing-certificate-in-2022/</loc></url><url><loc>https://unmitigatedrisk.com/2022/08/how-to-keep-bad-actors-out-in-open-ecosystems/</loc></url><url><loc>https://unmitigatedrisk.com/2022/08/user-managed-smart-cards-are-an-oxymoron/</loc></url><url><loc>https://unmitigatedrisk.com/2022/08/webpki-tls-cross-signs-device-compatibility-and-tls-record-size/</loc></url><url><loc>https://unmitigatedrisk.com/2022/08/what-would-it-look-like-to-go-back-to-first-principles-when-it-comes-to-root-store-management-in-2022/</loc></url><url><loc>https://unmitigatedrisk.com/2022/08/why-crawling-is-not-an-adequate-measurement-methodology-for-the-webpki/</loc></url><url><loc>https://unmitigatedrisk.com/2022/08/why-hasnt-shaken-stir-made-a-big-dent-in-the-volume-of-robocalls/</loc></url><url><loc>https://unmitigatedrisk.com/2022/09/</loc></url><url><loc>https://unmitigatedrisk.com/2022/09/top-5-cas-by-issuance-volume-as-of-09-19/</loc></url><url><loc>https://unmitigatedrisk.com/2022/11/</loc></url><url><loc>https://unmitigatedrisk.com/2022/11/a-boy-scout-is-always-prepared/</loc></url><url><loc>https://unmitigatedrisk.com/2022/11/baseline-requirements-are-just-that-a-baseline/</loc></url><url><loc>https://unmitigatedrisk.com/2022/11/tofu-and-the-web/</loc></url><url><loc>https://unmitigatedrisk.com/2022/12/</loc></url><url><loc>https://unmitigatedrisk.com/2022/12/to-err-is-human-to-forgive-is-divine/</loc></url><url><loc>https://unmitigatedrisk.com/2023/</loc></url><url><loc>https://unmitigatedrisk.com/2023/01/</loc></url><url><loc>https://unmitigatedrisk.com/2023/01/using-caddy-with-google-trust-services/</loc></url><url><loc>https://unmitigatedrisk.com/2023/02/</loc></url><url><loc>https://unmitigatedrisk.com/2023/02/global-trend-in-tech-regulation-and-its-consequences-for-the-eu-and-the-us/</loc></url><url><loc>https://unmitigatedrisk.com/2023/02/the-changing-landscape-of-internet-protection/</loc></url><url><loc>https://unmitigatedrisk.com/2023/02/the-importance-of-proper-measurement-in-enterprise-it-management-lessons-from-cloud-deployments/</loc></url><url><loc>https://unmitigatedrisk.com/2023/02/the-limitations-of-audits-what-you-need-to-know/</loc></url><url><loc>https://unmitigatedrisk.com/2023/03/</loc></url><url><loc>https://unmitigatedrisk.com/2023/03/exploring-the-potential-of-domain-control-notaries-for-mpdv-in-webpki/</loc></url><url><loc>https://unmitigatedrisk.com/2023/03/preparing-for-the-crypto-apocalypse/</loc></url><url><loc>https://unmitigatedrisk.com/2023/03/strengthening-domain-control-verification-the-role-of-multiple-perspectives-and-collaboration/</loc></url><url><loc>https://unmitigatedrisk.com/2023/03/the-growing-security-concerns-of-modern-firmware-and-the-need-for-change/</loc></url><url><loc>https://unmitigatedrisk.com/2023/03/towards-greater-accountability-a-proposal-for-ca-issuance-decision-logs/</loc></url><url><loc>https://unmitigatedrisk.com/2023/04/</loc></url><url><loc>https://unmitigatedrisk.com/2023/04/the-evolution-and-limitations-of-hardware-security-modules/</loc></url><url><loc>https://unmitigatedrisk.com/2023/09/</loc></url><url><loc>https://unmitigatedrisk.com/2023/09/document-authenticity-in-the-age-of-generative-ai-balancing-privacy-and-accountability/</loc></url><url><loc>https://unmitigatedrisk.com/2023/09/the-scale-of-consequence-storm-0558-vs-diginotar/</loc></url><url><loc>https://unmitigatedrisk.com/2023/09/words-matter-in-cryptography-or-at-least-they-used-to/</loc></url><url><loc>https://unmitigatedrisk.com/2023/12/</loc></url><url><loc>https://unmitigatedrisk.com/2023/12/effortless-certificate-lifecycle-management-for-s-mime/</loc></url><url><loc>https://unmitigatedrisk.com/2023/12/raising-the-bar-the-urgent-need-for-enhanced-firmware-security-and-transparency/</loc></url><url><loc>https://unmitigatedrisk.com/2023/12/the-rise-of-key-transparency-and-its-future-in-email-security/</loc></url><url><loc>https://unmitigatedrisk.com/2024/</loc></url><url><loc>https://unmitigatedrisk.com/2024/01/</loc></url><url><loc>https://unmitigatedrisk.com/2024/01/gov-id-if-at-first-you-dont-succeed-try-try-again/</loc></url><url><loc>https://unmitigatedrisk.com/2024/01/rethinking-how-we-assess-risk-in-the-software-we-rely-on/</loc></url><url><loc>https://unmitigatedrisk.com/2024/02/</loc></url><url><loc>https://unmitigatedrisk.com/2024/02/challenges-in-digital-content-authentication-and-the-persistent-battle-against-fakes/</loc></url><url><loc>https://unmitigatedrisk.com/2024/02/echoes-of-the-past-and-their-impact-on-security-today/</loc></url><url><loc>https://unmitigatedrisk.com/2024/02/evolving-challenges-in-software-security/</loc></url><url><loc>https://unmitigatedrisk.com/2024/02/navigating-content-authentication-in-the-age-of-generative-ai/</loc></url><url><loc>https://unmitigatedrisk.com/2024/02/tenement-farming-and-cloud-hsms/</loc></url><url><loc>https://unmitigatedrisk.com/2024/03/</loc></url><url><loc>https://unmitigatedrisk.com/2024/03/restoring-memories/</loc></url><url><loc>https://unmitigatedrisk.com/2024/04/</loc></url><url><loc>https://unmitigatedrisk.com/2024/04/how-sxg-certificates-can-authenticate-dns-txt-records/</loc></url><url><loc>https://unmitigatedrisk.com/2024/05/</loc></url><url><loc>https://unmitigatedrisk.com/2024/05/automating-non-human-identities-the-future-of-production-key-management/</loc></url><url><loc>https://unmitigatedrisk.com/2024/05/building-effective-roadmaps-through-mission-vision-and-strategy-alignment/</loc></url><url><loc>https://unmitigatedrisk.com/2024/05/navigating-security-and-innovation/</loc></url><url><loc>https://unmitigatedrisk.com/2024/05/rethinking-cybersecurity-in-complex-systems/</loc></url><url><loc>https://unmitigatedrisk.com/2024/05/the-rebirth-of-network-access-protection-with-microsofts-zero-trust-dns/</loc></url><url><loc>https://unmitigatedrisk.com/2024/05/transitioning-from-reactive-to-proactive/</loc></url><url><loc>https://unmitigatedrisk.com/2024/06/</loc></url><url><loc>https://unmitigatedrisk.com/2024/06/acme-vs-spiffe-choosing-the-right-one/</loc></url><url><loc>https://unmitigatedrisk.com/2024/06/balancing-innovation-and-privacy-the-risk-of-government-surveillance-in-the-age-of-ai/</loc></url><url><loc>https://unmitigatedrisk.com/2024/06/credential-management-vs-secret-management-choosing-the-right-approach/</loc></url><url><loc>https://unmitigatedrisk.com/2024/06/exploring-browser-distrust-case-studies-of-webpki-ca-incidents/</loc></url><url><loc>https://unmitigatedrisk.com/2024/06/from-static-to-dynamic-adapting-pki-for-cloud-native-architectures/</loc></url><url><loc>https://unmitigatedrisk.com/2024/06/groundhog-day-learning-from-past-key-and-credential-compromises/</loc></url><url><loc>https://unmitigatedrisk.com/2024/06/integrating-security-making-safe-software-development-seamless-and-productive/</loc></url><url><loc>https://unmitigatedrisk.com/2024/06/navigating-public-reporting-obligations-in-webpki-and-beyond/</loc></url><url><loc>https://unmitigatedrisk.com/2024/06/speeding-up-development-and-navigating-security-risks/</loc></url><url><loc>https://unmitigatedrisk.com/2024/06/understanding-patterns-in-webpki-ca-issues/</loc></url><url><loc>https://unmitigatedrisk.com/2024/06/why-we-trust-webpki-root-certificate-authorities/</loc></url><url><loc>https://unmitigatedrisk.com/2024/07/</loc></url><url><loc>https://unmitigatedrisk.com/2024/07/content-is-king-in-phishing-and-the-role-of-publicly-trusted-cas/</loc></url><url><loc>https://unmitigatedrisk.com/2024/07/exploring-requirements-for-timelines-certificate-problem-reports-and-revocations/</loc></url><url><loc>https://unmitigatedrisk.com/2024/07/global-consistency-for-akd-using-armored-witness-to-prevent-split-views/</loc></url><url><loc>https://unmitigatedrisk.com/2024/07/hsms-largely-protect-keys-from-theft-rather-than-abuse/</loc></url><url><loc>https://unmitigatedrisk.com/2024/07/reading-the-tea-leaves-what-led-to-the-largest-it-outage-in-history/</loc></url><url><loc>https://unmitigatedrisk.com/2024/07/timeless-farm-wisdom/</loc></url><url><loc>https://unmitigatedrisk.com/2024/07/turning-catastrophe-into-opportunity-improving-processes-and-vendor-accountability/</loc></url><url><loc>https://unmitigatedrisk.com/2024/08/</loc></url><url><loc>https://unmitigatedrisk.com/2024/08/beyond-the-facade-evaluating-long-term-impacts-of-enterprise-software-architectures/</loc></url><url><loc>https://unmitigatedrisk.com/2024/08/ca-misissuance-a-tale-of-two-incident-responses/</loc></url><url><loc>https://unmitigatedrisk.com/2024/08/the-true-essence-of-secure-by-design/</loc></url><url><loc>https://unmitigatedrisk.com/2024/08/when-words-mislead-cybersecuritys-terminology-problem/</loc></url><url><loc>https://unmitigatedrisk.com/2024/11/</loc></url><url><loc>https://unmitigatedrisk.com/2024/11/another-ca-fails-the-turing-test/</loc></url><url><loc>https://unmitigatedrisk.com/2024/11/bundling-and-unbundling-in-the-nhi-market-opportunities-in-identity-governance-and-cryptography/</loc></url><url><loc>https://unmitigatedrisk.com/2024/11/from-fairways-to-the-cloud-estimating-golf-balls-in-flight-to-tackling-cloud-workload-scale/</loc></url><url><loc>https://unmitigatedrisk.com/2024/11/from-years-to-seconds-rethinking-public-key-infrastructure/</loc></url><url><loc>https://unmitigatedrisk.com/2024/11/proactive-security-engineering-resilience-from-the-ground-up/</loc></url><url><loc>https://unmitigatedrisk.com/2024/11/rethinking-authentication-something-you-have-something-you-know-and-something-you-are-for-workloads-and-machines/</loc></url><url><loc>https://unmitigatedrisk.com/2024/11/the-myth-of-non-technical-product-management/</loc></url><url><loc>https://unmitigatedrisk.com/2024/11/winning-over-the-organization-the-subtle-art-of-getting-your-product-deployed/</loc></url><url><loc>https://unmitigatedrisk.com/2024/12/</loc></url><url><loc>https://unmitigatedrisk.com/2024/12/beyond-memorization-preparing-kids-to-thrive-in-a-world-of-endless-information/</loc></url><url><loc>https://unmitigatedrisk.com/2024/12/government-cas-and-the-webpki-trust-is-often-the-opposite-of-security/</loc></url><url><loc>https://unmitigatedrisk.com/2024/12/safeguarding-internet-trust-from-reactive-to-continuous/</loc></url><url><loc>https://unmitigatedrisk.com/2024/12/technology-bias-we-all-have-it-but-it-often-gets-in-the-way/</loc></url><url><loc>https://unmitigatedrisk.com/2025/</loc></url><url><loc>https://unmitigatedrisk.com/2025/01/</loc></url><url><loc>https://unmitigatedrisk.com/2025/01/how-ai-can-transform-our-broken-healthcare-system/</loc></url><url><loc>https://unmitigatedrisk.com/2025/01/the-laws-of-stupidity-and-the-gaps-in-your-security-posture/</loc></url><url><loc>https://unmitigatedrisk.com/2025/01/what-makes-a-qr-code-verifiable/</loc></url><url><loc>https://unmitigatedrisk.com/2025/01/why-its-time-to-rethink-machine-and-workload-identity-lessons-from-user-security/</loc></url><url><loc>https://unmitigatedrisk.com/2025/02/</loc></url><url><loc>https://unmitigatedrisk.com/2025/02/ai-agent-security-a-framework-for-accountability-and-control/</loc></url><url><loc>https://unmitigatedrisk.com/2025/02/educating-the-champion-the-buyer-and-the-market/</loc></url><url><loc>https://unmitigatedrisk.com/2025/02/from-perimeter-to-patterns-envisioning-security-a-decade-from-now/</loc></url><url><loc>https://unmitigatedrisk.com/2025/02/from-plato-to-ai-why-understanding-matters-more-than-information/</loc></url><url><loc>https://unmitigatedrisk.com/2025/02/from-the-morris-worm-to-modern-agentic-ai-threats/</loc></url><url><loc>https://unmitigatedrisk.com/2025/02/how-organizational-inertia-externalizes-risk-in-the-webpki/</loc></url><url><loc>https://unmitigatedrisk.com/2025/02/how-washington-state-is-preparing-to-undermine-parents-and-the-constitution/</loc></url><url><loc>https://unmitigatedrisk.com/2025/02/incident-response-done-right-a-cas-guide-to-resilience/</loc></url><url><loc>https://unmitigatedrisk.com/2025/02/key-management-a-meme-retrospective/</loc></url><url><loc>https://unmitigatedrisk.com/2025/02/the-account-recovery-problem-and-how-government-standards-might-actually-fix-it/</loc></url><url><loc>https://unmitigatedrisk.com/2025/02/the-fallacy-of-alignment-why-ai-safety-needs-structure-not-hope/</loc></url><url><loc>https://unmitigatedrisk.com/2025/02/the-identity-paradox-if-its-an-identity-why-is-it-in-a-secret-manager/</loc></url><url><loc>https://unmitigatedrisk.com/2025/03/</loc></url><url><loc>https://unmitigatedrisk.com/2025/03/clouds-accelerated-evolution-lessons-from-telecoms-century-of-change/</loc></url><url><loc>https://unmitigatedrisk.com/2025/03/operational-evolution-revisited-how-ai-native-systems-will-revolutionize-infrastructure/</loc></url><url><loc>https://unmitigatedrisk.com/2025/03/tpms-tees-and-everything-in-between-what-you-actually-need-to-know/</loc></url><url><loc>https://unmitigatedrisk.com/2025/03/understanding-enterprise-security-buyer-dynamics/</loc></url><url><loc>https://unmitigatedrisk.com/2025/04/</loc></url><url><loc>https://unmitigatedrisk.com/2025/04/decision-making-as-a-product-manager/</loc></url><url><loc>https://unmitigatedrisk.com/2025/04/how-sneakers-predicted-our-quantum-security-crisis/</loc></url><url><loc>https://unmitigatedrisk.com/2025/04/planning-for-change-lessons-in-cryptographic-agility/</loc></url><url><loc>https://unmitigatedrisk.com/2025/04/strategic-product-end-of-life-decisions/</loc></url><url><loc>https://unmitigatedrisk.com/2025/04/the-strategic-reality-of-enterprise-deployment-options/</loc></url><url><loc>https://unmitigatedrisk.com/2025/05/</loc></url><url><loc>https://unmitigatedrisk.com/2025/05/agents-not-browsers-keeping-time-with-the-future/</loc></url><url><loc>https://unmitigatedrisk.com/2025/05/agents-not-browsers-the-next-chapter-of-the-internet/</loc></url><url><loc>https://unmitigatedrisk.com/2025/05/deja-vu-in-the-webpki/</loc></url><url><loc>https://unmitigatedrisk.com/2025/05/necessity-is-the-mother-of-invention-why-constraints-invite-innovation/</loc></url><url><loc>https://unmitigatedrisk.com/2025/05/rethinking-compliance-ai-skill-liquidity-and-the-quest-for-verifiable-truth/</loc></url><url><loc>https://unmitigatedrisk.com/2025/05/the-rise-of-the-accidental-insider-and-the-ai-attacker/</loc></url><url><loc>https://unmitigatedrisk.com/2025/05/when-ai-injects-liquidity-into-skills-what-happens-to-the-middle-tier/</loc></url><url><loc>https://unmitigatedrisk.com/2025/06/</loc></url><url><loc>https://unmitigatedrisk.com/2025/06/conways-law-is-dying/</loc></url><url><loc>https://unmitigatedrisk.com/2025/06/from-mandate-to-maybe-the-quiet-unwinding-of-federal-cybersecurity-policy/</loc></url><url><loc>https://unmitigatedrisk.com/2025/06/how-lets-encrypt-changed-everything/</loc></url><url><loc>https://unmitigatedrisk.com/2025/06/lawyers-think-like-security-engineers-ai-treats-them-like-secretaries/</loc></url><url><loc>https://unmitigatedrisk.com/2025/06/the-ai-paradox-why-building-software-is-both-easier-and-riskier-than-ever/</loc></url><url><loc>https://unmitigatedrisk.com/2025/06/the-webpkis-moral-hazard-problem-when-those-who-decide-dont-pay-the-price/</loc></url><url><loc>https://unmitigatedrisk.com/2025/06/webpki-market-analysis-mozilla-telemetry-vs-certificate-transparency-data/</loc></url><url><loc>https://unmitigatedrisk.com/2025/06/what-does-cpa-canada-have-to-do-with-the-webpki-anyway/</loc></url><url><loc>https://unmitigatedrisk.com/2025/06/why-cp-and-cpss-matter-more-than-you-think/</loc></url><url><loc>https://unmitigatedrisk.com/2025/07/</loc></url><url><loc>https://unmitigatedrisk.com/2025/07/how-a-135-billion-fraud-bootstrapped-americas-digital-identity-system/</loc></url><url><loc>https://unmitigatedrisk.com/2025/07/when-automation-becomes-bureaucracy/</loc></url><url><loc>https://unmitigatedrisk.com/2025/08/</loc></url><url><loc>https://unmitigatedrisk.com/2025/08/from-persistent-to-ephemeral-why-ai-agents-need-fresh-identity-for-every-mission/</loc></url><url><loc>https://unmitigatedrisk.com/2025/08/history-doesnt-repeat-but-it-rhymes-the-ai-panic-edition/</loc></url><url><loc>https://unmitigatedrisk.com/2025/08/how-microsoft-code-signing-became-part-of-a-trust-subversion-toolchain/</loc></url><url><loc>https://unmitigatedrisk.com/2025/08/talent-isnt-a-security-strategy/</loc></url><url><loc>https://unmitigatedrisk.com/2025/09/</loc></url><url><loc>https://unmitigatedrisk.com/2025/09/another-sleeping-giant-microsofts-root-program-and-the-1-1-1-1-certificate-slip/</loc></url><url><loc>https://unmitigatedrisk.com/2025/09/cryptography-is-the-capstone-not-the-cornerstone/</loc></url><url><loc>https://unmitigatedrisk.com/2025/10/</loc></url><url><loc>https://unmitigatedrisk.com/2025/10/compliance-at-the-speed-of-code/</loc></url><url><loc>https://unmitigatedrisk.com/2025/10/gradually-then-suddenly-compliance-as-a-vital-sign-of-organizational-decay/</loc></url><url><loc>https://unmitigatedrisk.com/2025/10/llms-are-the-new-printing-press-why-im-optimistic-about-my-kids-future/</loc></url><url><loc>https://unmitigatedrisk.com/2025/11/</loc></url><url><loc>https://unmitigatedrisk.com/2025/11/the-vanishing-on-ramp/</loc></url><url><loc>https://unmitigatedrisk.com/2025/12/</loc></url><url><loc>https://unmitigatedrisk.com/2025/12/attestation-what-it-really-proves-and-why-everyone-is-about-to-care/</loc></url><url><loc>https://unmitigatedrisk.com/2025/12/the-impossible-equation/</loc></url><url><loc>https://unmitigatedrisk.com/2026/</loc></url><url><loc>https://unmitigatedrisk.com/2026/01/</loc></url><url><loc>https://unmitigatedrisk.com/2026/01/intuition-comes-last/</loc></url><url><loc>https://unmitigatedrisk.com/2026/01/the-housing-affordability-crisis/</loc></url><url><loc>https://unmitigatedrisk.com/2026/02/</loc></url><url><loc>https://unmitigatedrisk.com/2026/02/a-few-hours-and-the-slow-erosion-of-auditable-commitments/</loc></url><url><loc>https://unmitigatedrisk.com/2026/02/agents-are-more-like-humans-than-workloads-heres-why-that-matters-for-identity/</loc></url><url><loc>https://unmitigatedrisk.com/2026/02/disdain-or-design/</loc></url><url><loc>https://unmitigatedrisk.com/2026/02/domain-control-validation-grew-up-it-only-took-thirty-years/</loc></url><url><loc>https://unmitigatedrisk.com/2026/02/duplicates-are-not-the-problem/</loc></url><url><loc>https://unmitigatedrisk.com/2026/02/teach-to-the-median-punish-the-variance/</loc></url><url><loc>https://unmitigatedrisk.com/2026/02/the-data-doesnt-support-the-narrative/</loc></url><url><loc>https://unmitigatedrisk.com/2026/02/the-signal-they-chose-to-ignore/</loc></url><url><loc>https://unmitigatedrisk.com/2026/02/when-building-gets-cheap-distribution-becomes-destiny/</loc></url><url><loc>https://unmitigatedrisk.com/2026/02/youre-not-outsourcing-infrastructure-youre-outsourcing-capability/</loc></url><url><loc>https://unmitigatedrisk.com/2026/03/</loc></url><url><loc>https://unmitigatedrisk.com/2026/03/introducing-the-webpki-observatory/</loc></url><url><loc>https://unmitigatedrisk.com/2026/03/signed-auditable-offline-tolerant-pq-secure-qr-codes/</loc></url><url><loc>https://unmitigatedrisk.com/2026/03/the-webpki-and-client-authentication-are-at-a-crossroads/</loc></url><url><loc>https://unmitigatedrisk.com/2026/03/we-built-it-with-slide-rules-then-we-forgot-how/</loc></url><url><loc>https://unmitigatedrisk.com/2026/03/when-compliance-records-become-the-only-honest-signal/</loc></url><url><loc>https://unmitigatedrisk.com/2026/04/</loc></url><url><loc>https://unmitigatedrisk.com/2026/04/confidential-computing-what-it-is-what-it-isnt-and-how-to-think-about-it/</loc></url><url><loc>https://unmitigatedrisk.com/2026/04/confidential-computings-inconvenient-truth/</loc></url><url><loc>https://unmitigatedrisk.com/2026/04/the-illusion-of-constant-acceleration/</loc></url><url><loc>https://unmitigatedrisk.com/2026/04/why-nobody-can-verify-what-booted-your-server/</loc></url><url><loc>https://unmitigatedrisk.com/2026/05/</loc></url><url><loc>https://unmitigatedrisk.com/2026/05/a-ca-built-for-the-threat-model-we-actually-have/</loc></url><url><loc>https://unmitigatedrisk.com/2026/05/a-ca-that-produces-evidence-not-promises/</loc></url><url><loc>https://unmitigatedrisk.com/2026/05/ai-is-not-why-they-are-cutting-yet/</loc></url><url><loc>https://unmitigatedrisk.com/2026/05/smaller-provable-and-on-hardware-you-own-and-operate/</loc></url><url><loc>https://unmitigatedrisk.com/2026/05/the-first-ai-built-zero-day-is-not-the-interesting-part/</loc></url><url><loc>https://unmitigatedrisk.com/2026/06/</loc></url><url><loc>https://unmitigatedrisk.com/2026/06/the-breaker-the-priest-and-the-philosopher/</loc></url><url><loc>https://unmitigatedrisk.com/2026/06/the-prompt-is-an-argument/</loc></url><url><loc>https://unmitigatedrisk.com/2026/06/the-prompt-is-the-meaning/</loc></url><url><loc>https://unmitigatedrisk.com/2026/07/</loc></url><url><loc>https://unmitigatedrisk.com/2026/07/steve-jobs-ai-and-the-problem-of-analysis-without-ownership/</loc></url><url><loc>https://unmitigatedrisk.com/2026/07/the-certification-ends-where-the-code-begins/</loc></url><url><loc>https://unmitigatedrisk.com/2026/07/the-status-quo-outlived-its-status/</loc></url><url><loc>https://unmitigatedrisk.com/2026/07/why-fips-140-means-running-old-code/</loc></url><url><loc>https://unmitigatedrisk.com/2026/08/</loc></url><url><loc>https://unmitigatedrisk.com/2026/08/from-chains-to-trees/</loc></url><url><loc>https://unmitigatedrisk.com/2026/08/from-periodic-audit-to-continuous-assurance/</loc></url><url><loc>https://unmitigatedrisk.com/2026/08/hurst-university/</loc></url><url><loc>https://unmitigatedrisk.com/2026/08/the-amnesia-cycle-and-why-ai-is-turning-developers-back-into-testers/</loc></url><url><loc>https://unmitigatedrisk.com/2026/09/</loc></url><url><loc>https://unmitigatedrisk.com/2026/09/rejection-is-not-a-verdict/</loc></url><url><loc>https://unmitigatedrisk.com/about/</loc></url><url><loc>https://unmitigatedrisk.com/archive/</loc></url><url><loc>https://unmitigatedrisk.com/long-form/</loc></url><url><loc>https://unmitigatedrisk.com/tag/</loc></url><url><loc>https://unmitigatedrisk.com/tag/2fa/</loc></url><url><loc>https://unmitigatedrisk.com/tag/al-cutter/</loc></url><url><loc>https://unmitigatedrisk.com/tag/apache/</loc></url><url><loc>https://unmitigatedrisk.com/tag/append-only-ledger/</loc></url><url><loc>https://unmitigatedrisk.com/tag/apple/</loc></url><url><loc>https://unmitigatedrisk.com/tag/apprenticeship/</loc></url><url><loc>https://unmitigatedrisk.com/tag/armory/</loc></url><url><loc>https://unmitigatedrisk.com/tag/asn-1/</loc></url><url><loc>https://unmitigatedrisk.com/tag/attackers/</loc></url><url><loc>https://unmitigatedrisk.com/tag/authentication/</loc></url><url><loc>https://unmitigatedrisk.com/tag/authenticode/</loc></url><url><loc>https://unmitigatedrisk.com/tag/automatic-root-update/</loc></url><url><loc>https://unmitigatedrisk.com/tag/benchmarking/</loc></url><url><loc>https://unmitigatedrisk.com/tag/best-practices/</loc></url><url><loc>https://unmitigatedrisk.com/tag/binary-transparency/</loc></url><url><loc>https://unmitigatedrisk.com/tag/biometrics/</loc></url><url><loc>https://unmitigatedrisk.com/tag/bitcoin/</loc></url><url><loc>https://unmitigatedrisk.com/tag/bitgo/</loc></url><url><loc>https://unmitigatedrisk.com/tag/blockchain/</loc></url><url><loc>https://unmitigatedrisk.com/tag/browser-bound-certificates/</loc></url><url><loc>https://unmitigatedrisk.com/tag/ca/</loc></url><url><loc>https://unmitigatedrisk.com/tag/cab-forum/</loc></url><url><loc>https://unmitigatedrisk.com/tag/capicom/</loc></url><url><loc>https://unmitigatedrisk.com/tag/certificates/</loc></url><url><loc>https://unmitigatedrisk.com/tag/chains/</loc></url><url><loc>https://unmitigatedrisk.com/tag/chrome/</loc></url><url><loc>https://unmitigatedrisk.com/tag/cli/</loc></url><url><loc>https://unmitigatedrisk.com/tag/cms/</loc></url><url><loc>https://unmitigatedrisk.com/tag/coinbase/</loc></url><url><loc>https://unmitigatedrisk.com/tag/common-name/</loc></url><url><loc>https://unmitigatedrisk.com/tag/compliance/</loc></url><url><loc>https://unmitigatedrisk.com/tag/configuration/</loc></url><url><loc>https://unmitigatedrisk.com/tag/contracts/</loc></url><url><loc>https://unmitigatedrisk.com/tag/crl/</loc></url><url><loc>https://unmitigatedrisk.com/tag/crlsets/</loc></url><url><loc>https://unmitigatedrisk.com/tag/crt/</loc></url><url><loc>https://unmitigatedrisk.com/tag/cryprography/</loc></url><url><loc>https://unmitigatedrisk.com/tag/cryptoapi/</loc></url><url><loc>https://unmitigatedrisk.com/tag/cryptography/</loc></url><url><loc>https://unmitigatedrisk.com/tag/cryptoperiod/</loc></url><url><loc>https://unmitigatedrisk.com/tag/ct/</loc></url><url><loc>https://unmitigatedrisk.com/tag/curl/</loc></url><url><loc>https://unmitigatedrisk.com/tag/digital-signature/</loc></url><url><loc>https://unmitigatedrisk.com/tag/digital-signatures/</loc></url><url><loc>https://unmitigatedrisk.com/tag/dont-get-taken-advantage-of/</loc></url><url><loc>https://unmitigatedrisk.com/tag/dry-signature/</loc></url><url><loc>https://unmitigatedrisk.com/tag/dv/</loc></url><url><loc>https://unmitigatedrisk.com/tag/eap-tls/</loc></url><url><loc>https://unmitigatedrisk.com/tag/eap/</loc></url><url><loc>https://unmitigatedrisk.com/tag/ecc/</loc></url><url><loc>https://unmitigatedrisk.com/tag/education/</loc></url><url><loc>https://unmitigatedrisk.com/tag/eidas/</loc></url><url><loc>https://unmitigatedrisk.com/tag/eku/</loc></url><url><loc>https://unmitigatedrisk.com/tag/electronic-signatures/</loc></url><url><loc>https://unmitigatedrisk.com/tag/encryption/</loc></url><url><loc>https://unmitigatedrisk.com/tag/eutl/</loc></url><url><loc>https://unmitigatedrisk.com/tag/ev/</loc></url><url><loc>https://unmitigatedrisk.com/tag/expired-certificate/</loc></url><url><loc>https://unmitigatedrisk.com/tag/facebook/</loc></url><url><loc>https://unmitigatedrisk.com/tag/fingerprints/</loc></url><url><loc>https://unmitigatedrisk.com/tag/firefox/</loc></url><url><loc>https://unmitigatedrisk.com/tag/generative-ai/</loc></url><url><loc>https://unmitigatedrisk.com/tag/globalsign/</loc></url><url><loc>https://unmitigatedrisk.com/tag/golang/</loc></url><url><loc>https://unmitigatedrisk.com/tag/google-wifi/</loc></url><url><loc>https://unmitigatedrisk.com/tag/hacking/</loc></url><url><loc>https://unmitigatedrisk.com/tag/hardware-security-modules/</loc></url><url><loc>https://unmitigatedrisk.com/tag/heart-bleed/</loc></url><url><loc>https://unmitigatedrisk.com/tag/history/</loc></url><url><loc>https://unmitigatedrisk.com/tag/honeypots/</loc></url><url><loc>https://unmitigatedrisk.com/tag/how-to/</loc></url><url><loc>https://unmitigatedrisk.com/tag/hsm/</loc></url><url><loc>https://unmitigatedrisk.com/tag/hybrid-signature/</loc></url><url><loc>https://unmitigatedrisk.com/tag/identity/</loc></url><url><loc>https://unmitigatedrisk.com/tag/ie/</loc></url><url><loc>https://unmitigatedrisk.com/tag/iis/</loc></url><url><loc>https://unmitigatedrisk.com/tag/insurance/</loc></url><url><loc>https://unmitigatedrisk.com/tag/internationalization/</loc></url><url><loc>https://unmitigatedrisk.com/tag/internet-explorer/</loc></url><url><loc>https://unmitigatedrisk.com/tag/internship/</loc></url><url><loc>https://unmitigatedrisk.com/tag/interoperability/</loc></url><url><loc>https://unmitigatedrisk.com/tag/isolation/</loc></url><url><loc>https://unmitigatedrisk.com/tag/javascript/</loc></url><url><loc>https://unmitigatedrisk.com/tag/jobs/</loc></url><url><loc>https://unmitigatedrisk.com/tag/js/</loc></url><url><loc>https://unmitigatedrisk.com/tag/json/</loc></url><url><loc>https://unmitigatedrisk.com/tag/key-discovery/</loc></url><url><loc>https://unmitigatedrisk.com/tag/key-management/</loc></url><url><loc>https://unmitigatedrisk.com/tag/key-transparency/</loc></url><url><loc>https://unmitigatedrisk.com/tag/least-privilege/</loc></url><url><loc>https://unmitigatedrisk.com/tag/lets-encrypt/</loc></url><url><loc>https://unmitigatedrisk.com/tag/microsoft/</loc></url><url><loc>https://unmitigatedrisk.com/tag/mind-map/</loc></url><url><loc>https://unmitigatedrisk.com/tag/mindmap/</loc></url><url><loc>https://unmitigatedrisk.com/tag/monitis/</loc></url><url><loc>https://unmitigatedrisk.com/tag/mozilla/</loc></url><url><loc>https://unmitigatedrisk.com/tag/my-story/</loc></url><url><loc>https://unmitigatedrisk.com/tag/nac/</loc></url><url><loc>https://unmitigatedrisk.com/tag/name-constraints/</loc></url><url><loc>https://unmitigatedrisk.com/tag/names/</loc></url><url><loc>https://unmitigatedrisk.com/tag/nest/</loc></url><url><loc>https://unmitigatedrisk.com/tag/nginx/</loc></url><url><loc>https://unmitigatedrisk.com/tag/node/</loc></url><url><loc>https://unmitigatedrisk.com/tag/nsa/</loc></url><url><loc>https://unmitigatedrisk.com/tag/ocsp-stapling/</loc></url><url><loc>https://unmitigatedrisk.com/tag/ocsp/</loc></url><url><loc>https://unmitigatedrisk.com/tag/oid/</loc></url><url><loc>https://unmitigatedrisk.com/tag/oidc/</loc></url><url><loc>https://unmitigatedrisk.com/tag/open-source/</loc></url><url><loc>https://unmitigatedrisk.com/tag/openssl/</loc></url><url><loc>https://unmitigatedrisk.com/tag/opera/</loc></url><url><loc>https://unmitigatedrisk.com/tag/opinion/</loc></url><url><loc>https://unmitigatedrisk.com/tag/ov/</loc></url><url><loc>https://unmitigatedrisk.com/tag/paper/</loc></url><url><loc>https://unmitigatedrisk.com/tag/passwords/</loc></url><url><loc>https://unmitigatedrisk.com/tag/payments/</loc></url><url><loc>https://unmitigatedrisk.com/tag/pdf/</loc></url><url><loc>https://unmitigatedrisk.com/tag/performance/</loc></url><url><loc>https://unmitigatedrisk.com/tag/persona/</loc></url><url><loc>https://unmitigatedrisk.com/tag/personal/</loc></url><url><loc>https://unmitigatedrisk.com/tag/phishing/</loc></url><url><loc>https://unmitigatedrisk.com/tag/physical-security/</loc></url><url><loc>https://unmitigatedrisk.com/tag/pingdom/</loc></url><url><loc>https://unmitigatedrisk.com/tag/piperwallet/</loc></url><url><loc>https://unmitigatedrisk.com/tag/piwallet/</loc></url><url><loc>https://unmitigatedrisk.com/tag/pkcs11/</loc></url><url><loc>https://unmitigatedrisk.com/tag/pkcs12/</loc></url><url><loc>https://unmitigatedrisk.com/tag/pki-js/</loc></url><url><loc>https://unmitigatedrisk.com/tag/pki/</loc></url><url><loc>https://unmitigatedrisk.com/tag/pkijs/</loc></url><url><loc>https://unmitigatedrisk.com/tag/privacy/</loc></url><url><loc>https://unmitigatedrisk.com/tag/process/</loc></url><url><loc>https://unmitigatedrisk.com/tag/product/</loc></url><url><loc>https://unmitigatedrisk.com/tag/programming/</loc></url><url><loc>https://unmitigatedrisk.com/tag/protect/</loc></url><url><loc>https://unmitigatedrisk.com/tag/qualified-subordination/</loc></url><url><loc>https://unmitigatedrisk.com/tag/radius/</loc></url><url><loc>https://unmitigatedrisk.com/tag/rasberrypi/</loc></url><url><loc>https://unmitigatedrisk.com/tag/rest/</loc></url><url><loc>https://unmitigatedrisk.com/tag/revocation-checking/</loc></url><url><loc>https://unmitigatedrisk.com/tag/revocation/</loc></url><url><loc>https://unmitigatedrisk.com/tag/rfc3161/</loc></url><url><loc>https://unmitigatedrisk.com/tag/risks/</loc></url><url><loc>https://unmitigatedrisk.com/tag/root-program/</loc></url><url><loc>https://unmitigatedrisk.com/tag/roots/</loc></url><url><loc>https://unmitigatedrisk.com/tag/safari/</loc></url><url><loc>https://unmitigatedrisk.com/tag/safenet/</loc></url><url><loc>https://unmitigatedrisk.com/tag/same-origin-policy/</loc></url><url><loc>https://unmitigatedrisk.com/tag/san/</loc></url><url><loc>https://unmitigatedrisk.com/tag/scale/</loc></url><url><loc>https://unmitigatedrisk.com/tag/sdl/</loc></url><url><loc>https://unmitigatedrisk.com/tag/security/</loc></url><url><loc>https://unmitigatedrisk.com/tag/sha1/</loc></url><url><loc>https://unmitigatedrisk.com/tag/sha2/</loc></url><url><loc>https://unmitigatedrisk.com/tag/short-lived-certificates/</loc></url><url><loc>https://unmitigatedrisk.com/tag/signatures/</loc></url><url><loc>https://unmitigatedrisk.com/tag/signing/</loc></url><url><loc>https://unmitigatedrisk.com/tag/signtool/</loc></url><url><loc>https://unmitigatedrisk.com/tag/smart-card/</loc></url><url><loc>https://unmitigatedrisk.com/tag/smart-cards/</loc></url><url><loc>https://unmitigatedrisk.com/tag/smartcard-logon/</loc></url><url><loc>https://unmitigatedrisk.com/tag/smartcard/</loc></url><url><loc>https://unmitigatedrisk.com/tag/smartcards/</loc></url><url><loc>https://unmitigatedrisk.com/tag/smime/</loc></url><url><loc>https://unmitigatedrisk.com/tag/spdy/</loc></url><url><loc>https://unmitigatedrisk.com/tag/spiffe/</loc></url><url><loc>https://unmitigatedrisk.com/tag/ssl/</loc></url><url><loc>https://unmitigatedrisk.com/tag/standards/</loc></url><url><loc>https://unmitigatedrisk.com/tag/supply-chain/</loc></url><url><loc>https://unmitigatedrisk.com/tag/testing/</loc></url><url><loc>https://unmitigatedrisk.com/tag/thales/</loc></url><url><loc>https://unmitigatedrisk.com/tag/thoughts-2/</loc></url><url><loc>https://unmitigatedrisk.com/tag/threat-modeling/</loc></url><url><loc>https://unmitigatedrisk.com/tag/time/</loc></url><url><loc>https://unmitigatedrisk.com/tag/timestamping/</loc></url><url><loc>https://unmitigatedrisk.com/tag/tls/</loc></url><url><loc>https://unmitigatedrisk.com/tag/tool/</loc></url><url><loc>https://unmitigatedrisk.com/tag/tpm/</loc></url><url><loc>https://unmitigatedrisk.com/tag/trezor/</loc></url><url><loc>https://unmitigatedrisk.com/tag/troubleshooting/</loc></url><url><loc>https://unmitigatedrisk.com/tag/trust/</loc></url><url><loc>https://unmitigatedrisk.com/tag/uelma/</loc></url><url><loc>https://unmitigatedrisk.com/tag/unifi/</loc></url><url><loc>https://unmitigatedrisk.com/tag/uptime/</loc></url><url><loc>https://unmitigatedrisk.com/tag/user-experience/</loc></url><url><loc>https://unmitigatedrisk.com/tag/ux/</loc></url><url><loc>https://unmitigatedrisk.com/tag/vbs/</loc></url><url><loc>https://unmitigatedrisk.com/tag/verifiability/</loc></url><url><loc>https://unmitigatedrisk.com/tag/webcrypto/</loc></url><url><loc>https://unmitigatedrisk.com/tag/webpki/</loc></url><url><loc>https://unmitigatedrisk.com/tag/wet-signature/</loc></url><url><loc>https://unmitigatedrisk.com/tag/windows-xp/</loc></url><url><loc>https://unmitigatedrisk.com/tag/windows/</loc></url><url><loc>https://unmitigatedrisk.com/tag/wireless/</loc></url><url><loc>https://unmitigatedrisk.com/tag/workload/</loc></url><url><loc>https://unmitigatedrisk.com/tag/x-509/</loc></url><url><loc>https://unmitigatedrisk.com/tag/x509/</loc></url><url><loc>https://unmitigatedrisk.com/tag/xmldsig/</loc></url><url><loc>https://unmitigatedrisk.com/tag/xp/</loc></url><url><loc>https://unmitigatedrisk.com/topic/ai/</loc></url><url><loc>https://unmitigatedrisk.com/topic/bitcoin/</loc></url><url><loc>https://unmitigatedrisk.com/topic/compliance/</loc></url><url><loc>https://unmitigatedrisk.com/topic/cryptography/</loc></url><url><loc>https://unmitigatedrisk.com/topic/engineering/</loc></url><url><loc>https://unmitigatedrisk.com/topic/identity/</loc></url><url><loc>https://unmitigatedrisk.com/topic/leadership/</loc></url><url><loc>https://unmitigatedrisk.com/topic/life/</loc></url><url><loc>https://unmitigatedrisk.com/topic/pki/</loc></url><url><loc>https://unmitigatedrisk.com/topic/privacy/</loc></url><url><loc>https://unmitigatedrisk.com/topic/public-policy/</loc></url><url><loc>https://unmitigatedrisk.com/topic/security/</loc></url><url><loc>https://unmitigatedrisk.com/topic/standards/</loc></url></urlset>