Root Causes: A PKI and Security Podcast
Jun 19, 2026 · 13 min · 9 segments
2024 saw a flurry of high profile incidents for public CA, which we named the Bugzilla Bloodbath. We look back to see how the WebPKI has changed as a consequence.
Tim CallanHost
Jason SorokoHost
So Jason, in the summer to autumn of 2024, we coined a term on this podcast, which became a word that other people used out in the world, which is the Bugzilla bloodbath.
You know, Tim, to me, it was some of the most thoughtful reporting on the most exciting period.
And now that original kind of flurry of incidents and problems has run its course, though the amount of incidents, bugs that's being reported continues to be very high compared to historical numbers.
And I thought now, A year to a year and a half later, depending on when you declare it to have stopped, would be a good time to say, did this matter?
Read the full transcript.
Create an account to read the whole episode, search across every transcript, and follow the shows you care about.
So Jason, in the summer to autumn of 2024, we coined a term on this podcast, which became a word that other people used out in the world, which is the Bugzilla bloodbath.
You know, Tim, to me, it was some of the most thoughtful reporting on the most exciting period.
And now that original kind of flurry of incidents and problems has run its course, though the amount of incidents, bugs that's being reported continues to be very high compared to historical numbers.
And I thought now, A year to a year and a half later, depending on when you declare it to have stopped, would be a good time to say, did this matter?