Managing Risk from TLS Inspection
Recently, the National Security Agency (NSA) published a guide to Managing Risk from Transport Layer Security Inspection. The guide is designed to highlight the unique risks introduced into environments by the use of TLS inspection appliances. It also covers a few recommendations on how to secure these devices. There are some additional areas we recommend over and above […]
HSMs and the changing PKI Ecosystem
As I head back from the 1st annual Thales HSM User Group (HUG) conference in Chicago, I have been reflecting on the sessions and information that was shared at the conference. There is a ground swell of awareness around information protection and identity assurance. What was once the theoretical concepts of corporate espionage and dark […]
Free Webcast – Upgrading and Improving the Trust of Microsoft Windows Certificate Authorities
Check out the following free webcasts on Upgrading and Improving PKI security in your environment. A special focus will be on Windows Server 2003 CAs that are soon to be completely out of support when Microsoft ends Extended Support options. But the topics are applicable to Windows Server 2008 CAs as well. As part of these webcasts, […]
A Look Back at Conversations with the Brightest Minds in Cybersecurity
What an incredible, action-packed year 2019 turned out to be in cybersecurity. Throughout the past year, I interviewed industry experts, authors, and technology luminaries with topics ranging from quantum computing to authentication to top security threats to PKI evolution. Below are highlights from the 2019 The PKI Guy’s Q&A Series. Keep checking back to read […]
The PKI Guy explores quantum-ready solutions with Bruno Couillard of Crypto4A
Q&A with Bruno Couillard, president and CTO, Crypto4A TPG: Your hardware security module (HSM) architecture team has an interesting history in the world of cryptography—can you tell us about that? BC: Many of our team, (including myself and the other three founders) have been consistently in the crypto and cybersecurity space for decades. Some of us come […]
The PKI Guy explores data encryption with Cindy Provin of nCipher Security
Q&A with Cindy Provin, CEO, nCipher Security TPG: There has been lots of news lately about your company being acquired by Entrust Datacard. What’s the latest with nCipher Security? CP: nCipher Security is a separate company within Thales. nCipher has been operating as a separate stand-alone business within Thales since January 2019. We continue to provide […]
The PKI Guy talks enterprise security with Ryan Smith of Futurex
Q&A with Ryan Smith, vice president, global business development, Futurex TPG: Tell us about your cryptographic solutions. RS: Futurex is a global manufacturer of FIPS 140-2 Level 3 and PCI HSM validated hardware security modules and enterprise security applications. At a high level, our focus is on three areas: cryptographic processing, key and certificate management, and […]
Palo Alto and Bluecoat SSL Appliances and your PKI Security
Over the last year a common question has surfaced repeatedly as customers look to adopt SSL Packet inspection services for outgoing connections. These appliances are designed to allow monitoring and management of data contained inside of normally protected SSL sessions being initiated inside the organization. In order for these appliances to work, they have to […]