Rephonic
Artwork for Root Causes: A PKI and Security Podcast

Root Causes: A PKI and Security Podcast

Tim Callan and Jason Soroko
Post-Quantum Cryptography
Public Key Infrastructure
Quantum Computing
Digital Certificates
Cryptography
Cybersecurity
Artificial Intelligence
Google
Domain Control Validation
Certificate Authority
CA Browser Forum
Public Key Infrastructure (PKI)
Certificate Lifecycle Management
PKI
NIST
Web PKI
Apple
Certificate Authorities
RSA
Digital Identity

Digital certificate industry veterans Tim Callan and Jason Soroko explore the issues surrounding digital identity, PKI, and cryptographic connections in today's dynamic and evolving computing world. Best practices in digital certificates are continually under pressure from technology trends, new laws and regulations, cryptographic advances, and the evolution of our computing architectures to be mo... more

PublishesDailyEpisodes641Founded7 years ago
Number of ListenersCategories
TechnologyBusiness

Listen to this Podcast

Artwork for Root Causes: A PKI and Security Podcast

Latest Episodes

In our episode 640 we defined SPIFFE, which provides digital identity for agentic workloads. In this episode we explain SPIRE (SPIFFE Runtime Environment), the SPIFFE certificate provisioning protocol.

SPIFFE (Secure Production Identity Framework for Everyone) is a standard for digital identity for agentic workloads. In this episode we explain.

Static API keys are a common security practice. In this episode we discuss the risk of these keys being revealed, including directly by the AIs that use them.

Tim shares his very personal experience with would-be catfishers and we talk about how AI is set to change the catfishing attack.

Key Facts

Accepts Guests
Contact Information
Podcast Host
Number of Listeners
Find out how many people listen to this podcast per episode and each month.

Similar Podcasts

People also subscribe to these shows.

CyberWire Daily
CyberWire DailyN2K Networks
Software Engineering Daily
Software Engineering DailySoftware Engineering Daily
Maarten van Rossem & Tom Jessen
Maarten van Rossem & Tom JessenTom Jessen en Maarten van Rossem
Risky Bulletin
Risky BulletinRisky Business Media

Recent Guests

Sam Jaques
Assistant Professor at the University of Waterloo
University of Waterloo
Episode: Root Causes 622: Modeling the Time to CRQC
Bas Westerbaan
Repeat guest with Cloudflare experience
Cloudflare
Episode: Root Causes 619: Do We All Need to Adopt PQC by 2029?
Bruno Culliard
Listener and Contributor
Episode: Root Causes 572: Quality of Entropy
Chris McGrath
Industry expert discussing implications of post-quantum cryptography
Episode: Root Causes 570: PQC Readiness at the Boardroom Level
Pol Holzmer
Doctor researcher at the University of Luxembourg
University of Luxembourg
Episode: Root Causes 546: New Research Codifies Arguments for and Against QWACs
Johannes Sedlmeir
Acting professor at the University of Munster
University of Munster
Episode: Root Causes 546: New Research Codifies Arguments for and Against QWACs
Sofia Celi
Cryptographer for the Brave Browser and contributor to NIST cryptography competitions.
Brave Browser
Episode: Root Causes 497: PQC Update with Sofia Celi
Dr. Michele Mosca
Cryptography expert and co-founder of Evolution Cube
Evolution Cube
Episode: Root Causes 491: RSA's Non-quantum Threat
Dmitry Sharkov
Technical Architect
Sigtigo
Episode: Root Causes 485: What Is Open MPIC?

Hosts

Tim Callan
Co-host and PKI/security expert; provides leadership on topic framing and practical security guidance.
Jason Soroko
Co-host and PKI/security expert; co-leads discussions and helps demystify cryptography topics for practitioners.

Reviews

5.0 out of 5 stars from 44 ratings
  • Keeping current with Root Causes

    Thank you for providing “key” information on Pki and digital identity topics. It is an awesome way to stay current and learn how to protect digital assets in a constantly changing landscape.

    Apple Podcasts
    5
    PKI Princess
    United States4 years ago
  • Thank you so much

    Been in the systems engineering space for 10 years and I’ve continued to struggle with PKI and CA. The concept I get sure but execution in the organizations I’ve been apart of always looked like some disgusting, unscalable sidecar process that we all just had to do. This podcast has slowly filled those gaps in helping me understand soup to nuts what it’s all about, the risks, and what right looks like. Thanks guys! Love the show.

    Apple Podcasts
    5
    ModernLifeIsWar
    United States6 years ago

Listeners Say

Key themes from listener reviews, highlighting what works and what could be improved about the show.

Engaging breakdowns of PKI and digital identity improve practical understanding.
Listener feedback highlights practical value for teams tackling PKI complexity.
Clear tech depth with actionable guidance, especially for migration planning and governance.

Chart Rankings

How this podcast ranks in the Apple Podcasts, Spotify and YouTube charts.

Apple Podcasts
#169
France/Technology
Apple Podcasts
#236
Australia/Technology
Apple Podcasts
#204
Netherlands/Technology

Talking Points

Recent interactions between the hosts and their guests.

Root Causes 636: The Future of Crypto Agility
Q: What happens after the initial PQC on-ramp? Will there be more contests and ongoing research, or is the era of new standards behind us?
The expectation is that research will continue and new attacks or advancements will necessitate further transitions, with an emphasis on crypto agility to make future changes easier and less disruptive.
Root Causes 620: Will NIST Update Its PQC Timelines?
Q: Should we expect NIST to re-evaluate its dates in light of new research and industry pressure?
Moody indicates that while the core 2035 deadline remains likely, NIST will adjust guidance if circumstances warrant, especially for rapidly migratable use cases like cloud deployments, but emphasizes coordination with federal agencies and maintaining a practical, staged approach.
Root Causes 618: MTC and Private PKI
Q: What are the practical downsides of Merkle Tree Certificates for private PKI, and when might they not be worth it?
Size and landmark management are core concerns; for some operators with small, light-weight devices or limited trusted channels, sticking with traditional approaches might be simpler unless the benefits of reduced signing operations or improved downgrades handling justify the complexity.
Root Causes 618: MTC and Private PKI
Q: If I enforce 100% PQC compliance and require that non-PQC entities can't connect, is MTC really necessary?
You can deploy plain PQC as is, but many environments benefit from MTC when there are large signature workloads or when you need the efficiency of signing a tree head that represents many certificates at once.
Root Causes 613: Status of the NIST PQC Contests
Q: What are the main criteria used to evaluate PQC algorithms?
Security against classical and quantum attacks, potential for a formal security proof, performance metrics (key sizes, ciphertext/signature sizes, speed), and implementation characteristics including side-channel resistance and IP concerns.

Audience Metrics

Listeners, social reach, demographics and more for this podcast.

Listeners per Episode
Gender Skew
Location
Interests
Professions
Age Range
Household Income
Social Media Reach

Frequently Asked Questions About Root Causes: A PKI and Security Podcast

What is Root Causes: A PKI and Security Podcast about and what kind of topics does it cover?

This show covers the practical and strategic side of digital identities, PKI, and cryptography in modern infrastructure. Episodes frequently unpack post-quantum cryptography, private PKI, Merkle Tree Certificates, and evolving standards, with real-world guidance on migration timelines, governance, and operational impacts for organizations of different sizes. Notable strengths include candid discussions of implementation realities, ongoing standardization efforts, and the interplay between vendors, regulators, and practitioners, making it valuable for security teams, IT leaders, and cryptography professionals considering migrations or evaluating new technologies.

A standout trait is the focus on actionable takeaways rather than abstract the... more

Where can I find podcast stats for Root Causes: A PKI and Security Podcast?

Rephonic provides a wide range of podcast stats for Root Causes: A PKI and Security Podcast. We scanned the web and collated all of the information that we could find in our comprehensive podcast database. See how many people listen to Root Causes: A PKI and Security Podcast and access YouTube viewership numbers, download stats, audience demographics, chart rankings, ratings, reviews and more.

How many listeners does Root Causes: A PKI and Security Podcast get?

Rephonic provides a full set of podcast information for three million podcasts, including the number of listeners. View further listenership figures for Root Causes: A PKI and Security Podcast, including podcast download numbers and subscriber numbers, so you can make better decisions about which podcasts to sponsor or be a guest on. You will need to upgrade your account to access this premium data.

What are the audience demographics for Root Causes: A PKI and Security Podcast?

Rephonic provides comprehensive predictive audience data for Root Causes: A PKI and Security Podcast, including gender skew, age, country, political leaning, income, professions, education level, and interests. You can access these listener demographics by upgrading your account.

How many subscribers and views does Root Causes: A PKI and Security Podcast have?

To see how many followers or subscribers Root Causes: A PKI and Security Podcast has on Spotify and other platforms such as Castbox and Podcast Addict, simply upgrade your account. You'll also find viewership figures for their YouTube channel if they have one.

Which podcasts are similar to Root Causes: A PKI and Security Podcast?

These podcasts share a similar audience with Root Causes: A PKI and Security Podcast:

1. CyberWire Daily
2. SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
3. Software Engineering Daily
4. Maarten van Rossem & Tom Jessen
5. Risky Bulletin

How many episodes of Root Causes: A PKI and Security Podcast are there?

Root Causes: A PKI and Security Podcast launched 7 years ago and published 641 episodes to date. You can find more information about this podcast including rankings, audience demographics and engagement in our podcast database.

How do I contact Root Causes: A PKI and Security Podcast?

Our systems regularly scour the web to find email addresses and social media links for this podcast. We scanned the web and collated all of the contact information that we could find in our podcast database. But in the unlikely event that you can't find what you're looking for, our concierge service lets you request our research team to source better contacts for you.

Where can I see ratings and reviews for Root Causes: A PKI and Security Podcast?

Rephonic pulls ratings and reviews for Root Causes: A PKI and Security Podcast from multiple sources, including Spotify, Apple Podcasts, Castbox, and Podcast Addict.

View all the reviews in one place instead of visiting each platform individually and use this information to decide if a show is worth pitching or not.

How do I access podcast episode transcripts for Root Causes: A PKI and Security Podcast?

Rephonic provides full transcripts for episodes of Root Causes: A PKI and Security Podcast. Search within each transcript for your keywords, whether they be topics, brands or people, and figure out if it's worth pitching as a guest or sponsor. You can even set-up alerts to get notified when your keywords are mentioned.

What guests have appeared on Root Causes: A PKI and Security Podcast?

Recent guests on Root Causes: A PKI and Security Podcast include:

1. Sam Jaques
2. Bas Westerbaan
3. Bruno Culliard
4. Chris McGrath
5. Pol Holzmer
6. Johannes Sedlmeir
7. Sofia Celi
8. Dr. Michele Mosca

To view more recent guests and their details, simply upgrade your Rephonic account. You'll also get access to a typical guest profile to help you decide if the show is worth pitching.

Find and pitch the right podcasts

We help savvy brands, marketers and PR professionals to find the right podcasts for any topic or niche. Get the data and contacts you need to pitch podcasts at scale and turn listeners into customers.
Try it free for 7 days