Tagged “Security”

43 posts

Another Sleeping Giant: Microsoft’s Root Program and the 1.1.1.1 Certificate SlipSeptember 3, 20257 min readPKI & Certificates Compliance & Audits
Why CP and CPSs Matter More Than You ThinkJune 4, 20255 min readPKI & Certificates Compliance & Audits
Rethinking Authentication: “Something You Have,” “Something You Know,” and “Something You Are” for Workloads and MachinesNovember 26, 20243 min readIdentity & Authentication Security Practice
When Words Mislead: Cybersecurity’s Terminology ProblemAugust 21, 20242 min readSecurity Practice Leadership & Product
Navigating Content Authentication In the Age of Generative AIFebruary 26, 20243 min readAI PKI & Certificates
Tenement Farming and Cloud HSMsFebruary 24, 20246 min readCryptography & Keys Security Practice
Effortless Certificate Lifecycle Management for S/MIMEDecember 18, 20233 min readPKI & Certificates
The Rise of Key Transparency and Its Potential Future in Email SecurityDecember 18, 20235 min readCryptography & Keys PKI & Certificates
Exploring the Potential of Domain Control Notaries for MPDV in WebPKIMarch 21, 20233 min readPKI & Certificates
Why crawling is not an adequate measurement methodology for the WebPKIAugust 2, 20221 min readPKI & Certificates
Evolution of privacy governance and how cryptographic controls can helpSeptember 7, 20214 min readPrivacy Compliance & Audits Cryptography & Keys
Risk variance and managing riskMarch 26, 20184 min readSecurity Practice
The Evolution of Security ThinkingMarch 25, 20184 min readSecurity Practice Leadership & Product
How to Build Your Own OpenSSLJune 30, 20131 min readEngineering & Code Cryptography & Keys
Abstract: Revocation reality and the path to becoming effectiveFebruary 16, 20131 min readPKI & Certificates
Is SSL Broken?February 4, 20133 min readPKI & Certificates Security Practice
What is the status of revocation checking in browsers? November 1, 20123 min readPKI & Certificates
Algorithms, key size and digital certificatesSeptember 4, 20124 min readCryptography & Keys PKI & Certificates Standards & Governance
Government CAs in the Microsoft Root ProgramJuly 13, 20128 min readPKI & Certificates Standards & Governance
Wanted: Senior Software Engineer (Back-End) [Manila]July 3, 20122 min readLeadership & Product
Wanted: Senior Software Engineer / Lead [Manila]July 3, 20122 min readLeadership & Product
Wanted: Information Technology Manager [Tokyo]July 3, 20122 min readLeadership & Product
Wanted: Network and System Specialist [Singapore]July 3, 20122 min readLeadership & Product
Wanted: Software Engineer [Seattle/Manila]July 3, 20122 min readLeadership & Product
Wanted: Senior Software Engineer (Front-End) [Seattle]July 3, 20122 min readLeadership & Product
A look at the new Windows Update SSL certificatesJune 17, 20127 min readPKI & Certificates Security Practice
What is your organizations policy on SSL?June 15, 20122 min readPKI & Certificates Standards & Governance
Redirecting HTTP to HTTPS in IISJune 15, 20122 min readEngineering & Code PKI & Certificates
Was the Flame WSUS attack caused just because of the use of MD5?June 13, 20122 min readCryptography & Keys Security Practice PKI & Certificates
RSA keys under 1024 bits and youJune 13, 20122 min readCryptography & Keys PKI & Certificates
OCSP Stapling in IISJune 12, 20121 min readPKI & Certificates Engineering & Code
OCSP Stapling in ApacheJune 12, 20122 min readPKI & Certificates Engineering & Code
Flame and Certificate RevocationJune 12, 20122 min readPKI & Certificates Security Practice
Flame was just one use of the Terminal Services Licensing PKIJune 10, 20123 min readPKI & Certificates Security Practice
How did the Terminal Services Licensing PKI effect you?June 8, 20122 min readPKI & Certificates Security Practice
How one typically verifies code comes from MicrosoftJune 7, 20123 min readPKI & Certificates Security Practice
The tale of two (Microsoft) PKIs June 6, 20121 min readPKI & Certificates Security Practice
MSRC 2718704 and the age of the rogue certificatesJune 6, 20123 min readPKI & Certificates Security Practice
MSRC 2718704 and Terminal Services License CertificatesJune 6, 20122 min readPKI & Certificates Security Practice
MSRC 2718704 and Nested EKU enforcementJune 6, 20124 min readPKI & Certificates Security Practice
MSRC 2718704 and the Terminal Services Licensing ProtocolJune 4, 20124 min readPKI & Certificates Security Practice
The Contrition of a Security PractitionerMay 27, 20103 min readSecurity Practice Leadership & Product
What is a wildcard certificate and why are they a bad idea?August 17, 20073 min readPKI & Certificates Security Practice