1
Outlook.com is rejecting email from domains without DMARC
Since November 5, Outlook.com and Hotmail have been bouncing mail from domains with no DMARC record, small senders included. What changed, and the one-record fix.
New
The latest blog posts to take off on Hacker News. 1,406 posts.
2
OpenSSH 10.6p2 Critical workaround for alpine without PAM
OpenSSH release notes
3
4
We halved DNS build delay and cut memory use by 85%
Zone setting changes used to rebuild entire DNS zones, even ones with tens of millions of records. Here is how we built a planner that picks the smallest safe build, cutting full builds by 40%, peak memory by 85%, and halving build delay.
5
Sanstun: A sans-IO, parallel-friendly WireGuard implementation in Rust
Our sans-IO WireGuard implementation in Rust, optimized for ease of use, security and performance through a parallel-friendly and idiomatic API.
6
The federated code forge
For most of the past two decades, the code forge has been where projects live: where code is hosted, where changes are reviewed, and where contributors find each other. Forges offered convenience in exchange for centralisation.
7
If IPv4 were land
An interactive world map where every country is resized by how many IPv4 addresses it holds instead of its land area. Flip between real land and IPv4 land, zoom in, and compare countries.
8
Tailscale SSH: Investigation and remediation update
Securely connect to anything on the internet with Tailscale. Built on WireGuard®️, Tailscale enables you to make finely configurable connections, secured end-to-end according to zero trust principles, between any resources on any infrastructure.
9
Quad9 to exit France
A public and free DNS service for a better security and privacy
10
France's supermarket fridges were vulnerable online for months
IPinfo scans reveal that 85% of exposed French refrigeration controllers had known security flaws before the October 2026 cyberattack.
11
RPKI now protects 70% of internet routes
RPKI now protects 70% of Internet routes. See what drove the 2026 jump, how well it stops invalid routes, and where gaps remain.
12
13
Yandex outage: data shows that instead of going dark, malicious bots moved
When strikes hit Yandex data centers, many assumed Russian bot operations went dark. Cloudflare data reveals that while search crawling stopped, malicious bots simply migrated to other networks.
14
Submarine cable resilience
The estimated 1.5M kilometres of subsea communications cables underpins our global telecommunication services. This critical infrastructure faces serious challenges in the coming years.
15
The Hetzner Cloud network stack – history and technical overview
Learn how the Hetzner Cloud network stack has evolved and what role Open vSwitch, Private Networks, and Cloud Firewalls play.
16
Web Search API
Search the web from your AI agents and applications through AI Gateway with Ceramic.ai, Exa, and Linkup.
17
Cloudflare OHTTP gateway
We’re announcing the closed beta of a self-serve Cloudflare OHTTP Gateway. We’re also renaming our Privacy Gateway to Cloudflare OHTTP Relay to better distinguish the two products.
18
ArXiv's Updated Rate Limit Policy
arXiv, and the scientific community at large, are facing a watershed moment. Scholarly publishing is currently changing at a rapid pace, and we are seeing a…
19
Armada: Encrypted, Open-Source, Discord Alternative (Built on Nostr)
A free, open source, end-to-end encrypted Discord alternative: servers, channels, voice, and moderation, with no company in the middle. Now in open beta.
20
Making Tailscale Faster
Tailscale performance updates reduce memory use, increase throughput, and speed startup with multi-queue, writev, and netmap caching.
21
Cloudflare AKE cuts origin HelloRetryRequests from 52% to 3.7%
Automatic Key Exchange probes TLS 1.3-capable customer origins to learn which key agreement algorithms they support. We then lead with the most secure algorithm when connecting to the origin, preferring post-quantum connections wherever the origin supports it.
22
Among European Companies That Use a CDN, Nearly 9 in 10 Use Cloudflare
Across 44,143 European companies with a detected CDN, 89.6% use Cloudflare. We publish the per-country counts and what the 2025-26 outages showed.
23
Shutting down our public encrypted DNS
Mullvad has operated public encrypted DNS (DoH) servers since 2022. They are unnecessary when using Mullvad VPN — traffic is already encrypted and Mullvad VPN's internal DNS handles all queries.
24
Saving 100 terabytes of memory by optimizing 1.1.1.1's DNS cache
Five Rust-level memory optimizations to the DNS cache layout of Big Pineapple cut per-entry memory by 56%, freeing approximately 100 TB of memory across Cloudflare's fleet.
25
ATProto spaces: A new extension to ATProto that enables non-public data
Atproto Spaces, formerly known as “the permissioned data protocol,” is a new extension to atproto that enables non-public data. The alpha is now officially open. Here’s how to develop with it and what to expect as we work towards the full release.
26
Self hosted email continues to steeply decline
Ten years of DNS measurements reveal three trends across the Internet's most popular domains: email continues to consolidate around two providers, DMARC enforcement has hit a plateau, and a surprisingly large long tail of infrastructure defies easy classification.
27
RustDesk now supports true unattended remote access on Wayland
Try the RustDesk Wayland preview for x86_64 Debian/Ubuntu-based systems: unattended access across multiple monitors and at the login screen after reboot.
28
Bluesky Protocol Services
A new home for the infrastructure Bluesky runs on the open network — including Jetstream v2 with network replay, a new Jetstream SDK, and a lex-based TypeScript SDK
29
What DMARC Protects You From, and What It Does Not
DMARC verifies a domain owner authorised an email; it does not verify the email is safe. Where DMARC helps, where it falls short, and why authentication is not trust.
30
DMARC has been public since 2012 but most company domains still don't enforce it
DMARC has been public since 2012. We checked 67,336 domains: 68.4% still have no policy or one that does not enforce it.