Managing Risk from TLS Inspection
Recently, the National Security Agency (NSA) published a guide to Managing Risk from Transport Layer Security Inspection. The guide is designed to highlight the unique risks introduced into environments by the use of TLS inspection appliances. It also covers a few recommendations on how to secure these devices. There are some additional areas we recommend over and above […]
Goodbye MD5 – Sooner Than You Think!
If you recall, last year Microsoft took a small step to increase the security of enterprises by following industry standards that weaker/shorter keylengths were no longer viable for production use. Microsoft did this with KB 2661254 which prevented Windows operating systems from validating certificates with key lengths shorter than 1024. Recently, Microsoft announced Security Advisory 2862973 that will block […]
PKI Insights – Avoiding PenTest Pitfalls
In our most recent webinar, we dove deep into the evolving landscape of Public Key Infrastructure (PKI) and its critical role in the future of digital security. As your host, along with Nick Sirikulbut, we had the privilege of exploring the intricate ways in which PKI fortifies cybersecurity measures across diverse industries. We kicked off […]
Why you are getting it wrong with Certificate Lifecycle Management
Sometimes it’s hard to be in a space that you care about so deeply and have dedicated not only the last twenty-plus years of your life but also based your entire personal life around the creation and growth of a business. Some called me crazy for placing my entire professional career on the line […]
PKI Insights Recap – Microsoft Intune Cloud PKI
We recently had the opportunity to revise and launch our monthly webinar series focused on PKI technologies. Our new program “PKI Insights” will be held each month and cover timely topics that are affecting enterprises around the world as it relates to PKI. Over the last many years, we have had a large amount of […]
The PKI Guy talks identity management with Jay Schiavo of Entrust Datacard
Q&A with Jay Schiavo, vice president of Entrust Certificate Services Markets, Entrust Datacard TPG: How will nCipher Security strengthen Entrust Datacard’s offering to secure data and verify identities, and reduce risks? JS: The acquisition of the nCipher general purpose HSM business allows Entrust Datacard to provide our customers with solutions that exceed expectations for high-assurance use […]
The PKI Guy discusses digital certificates security with Muralidharan Palanisamy of AppViewX
Q&A with Muralidharan Palanisamy, chief solutions officer, AppViewX TPG: Tell us a little bit about AppViewX. MP: AppViewX is revolutionizing the way NetOps and SecOps teams deliver services to Enterprise IT. We have a modular, low-code software platform that enables the automation and orchestration of network and security infrastructure using an intuitive, context-aware, visual workflow. TPG: What is your […]
The PKI Guy drills down on PKI operations with Jeff Stapleton, author
Q&A with J.J. Stapleton, co-author of Security without Obscurity: A Guide to PKI Operations TPG: What practical advice do you have for an organization considering deploying a PKI solution? JS: There are various PKI architectures to consider. An internal private PKI deployed wholly within the organization, a hosted private PKI deployed at a third-party service provider, or […]