Trust Engineering: Building Security Leadership at Early-Stage...
summary
Shows concrete measurements and an operational plan: CT log scans find 398 days average certificate lifetimes, 72% had certificate outage in the past year, and >65% of Fortune 500 still use RSA (quantum-vulnerable), leaving ~78% failing a crypto-agility check. Recommends discover+inventory via CT and tools (projectdiscovery TLSX, cert-audit, PKI security tools), automate rotation, adopt 47-day validity by 2029 and hybrid PQC (Kyber/ Dilithium) transitions, and provides open-source tooling in progress.
AI-written summary · about
chapters (11)
- 0:00Introduction and speaker intro
- 1:07Weaknesses in today's PKI
- 3:57Real-world PKI incidents
- 7:09Quantum vulnerability stats
- 11:21What is crypto agility?
- 14:52Quantum computing timeline
- 19:26Post-quantum cryptography standards
- 22:56Transition challenges and hybrid approach
- 25:24Building a post-quantum PKI strategy
- 26:47Key takeaways and next steps
- 27:09Q&A session
related talks
27mScaling Trust: CLM Roadblocks on the Path to Post Quantum Resilience
30mPreparing Vulnerability Management for the Post-Quantum Era: From Legacy Cryptography Crypto-Agility
44mA Matter Of Trust: When Security Is Not Enough
20mTrust Agility in an Era of Transient Ties: Rethinking TLS...
12mKeyfactor on Cryptographic Discovery: Why Knowing What You Have Is Step One
59mProactively defending your business
27mCrypto Agility How it’s both a Critical Component and a Complex Challenge
29mKeys, Certs and Vault: From DevSecOps to Post-Quantum