New
The latest blog posts to take off on Hacker News. 204 posts.
Encrypted SNI Comes to Firefox Nightly
TL;DR: Firefox Nightly now supports encrypting the TLS Server Name Indication (SNI) extension, which helps prevent attackers on your network from learning your browsing history. You can enable encrypted SNI ...
Building a Cross-Browser, Cross-Platform, Real-Time Game Streaming Protocol
BUILDING FOR HUMANITY
Modernizing Transport Security
Posted by David Benjamin, Chrome networking *Updated on October 17, 2018 with details about changes in other browsers TLS (Transport Lay...
Dropbox traffic infrastructure: Edge network
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
Cloudflare Browser Check
Secure DNS Transport using DoH (DNS over HTTPS) or DoT (DNS over TLS) and SNI with ECH
Kubernetes on Google, Azure and AWS Compared
Compare Amazon EKS, Azure AKS and Google GKE: what each managed Kubernetes service provides and which fits your applications and cloud services.
Someone used my IPFS gateway for phishing
At 02:43 this morning, I received an abuse complaint email. It was sent by PhishLabs to DigitalOcean, and DigitalOcean forwarded it to me.
First-ever DNSSEC root key rollover
DNSSEC is a system of digital signatures that prevent DNS spoofing. Using DNSSEC, it does not matter where your DNS answers came from, since the DNS resolver or application can verify the DNSSEC signatures to ensure the DNS data is not tampered with..DNS is hierarchical, which means that the parent zone vouches for…
GoogleMeetRoulette: Joining random meetings
Finding Google Meet phone numbers and bruteforcing PINs to join random meetings
Wi-Fi Alliance introduces Wi-Fi 6
New generational approach enables users to easily differentiate between Wi-Fi® technologies
Introducing Cloudflare Registrar
“I love my domain registrar.” Has anyone ever said this? Before Cloudflare even launched in 2010, our early beta customers were literally begging us: "Will you please launch a registrar too?!"
Encrypt it or lose it: how encrypted SNI works
Today we announced support for encrypted SNI, an extension to the TLS 1.3 protocol that improves privacy of Internet users.
Introducing the Cloudflare Onion Service
Two years ago this week Cloudflare introduced Opportunistic Encryption, a feature that provided additional security and performance benefits to websites that had not yet moved to HTTPS.
RPKI – The required cryptographic upgrade to BGP routing
We have talked about the BGP Internet routing protocol before. We have talked about how we build a more resilient network and how we can see outages at a country-level via BGP. We have even talked about the network community that is vital to the operation of the global Internet.
Most use cases of ActivityPub would be better off as Atom or RSS feeds
Most use cases of ActivityPub would be better off as Atom or RSS feeds.
Research shows that nearly every U.S. cell provider is doing throttling
YouTube resolution down again? Through a collaboration with another Massachusetts university, this Northeastern team unveils exactly who’s responsible.
Introducing Cloudflare’s IPFS Gateway
Today we’re excited to introduce Cloudflare’s IPFS Gateway, an easy way to access content from the the InterPlanetary File System (IPFS) that doesn’t require installing and running any special software on your computer.
Introduction to HAProxy ACLs
A practical guide to HAProxy ACLs. Learn the syntax and follow step-by-step examples to block traffic, redirect users, choose backends, and enhance security.
How Discord Handles Two and Half Million Concurrent Voice Users Using WebRTC
Discover the latest news and app updates, stories, company insights, and plenty more about Discord, all in one place.
Fixing an old hack – why we are bumping the IPv6 MTU
Back in 2015 we deployed ECMP routing - Equal Cost Multi Path - within our datacenters. This technology allowed us to spread traffic heading to a single IP address across multiple physical servers.
How Tutanota replaced Google’s FCM with their own notification system
As mentioned in This Week In F-Droid 17, Tutanota is now on F-Droid. In this special post Ivan from Tutanota, tells us the story. Hi, I’m Ivan and I am devel...
Mastodon 2.5 released
Mastodon 2.5 is the 100th released version of Mastodon since the project’s inception almost 2 years ago. It brings a variety of improvements to the software, the full list of which is available in the changelog. Public profile page The public areas of the web interface have been redesigned. The color scheme and design…
MikroTik routers are forwarding owners’ traffic to unknown attackers
[Update] 2018-09-05 11:00 GMT+8, with the generous help from the AS64073, 103.193.137.211 has been promptly suspended and is no longer a threat. Overview MikroTik is a Latvian company founded in 1996 to develop routers and wireless ISP systems. MikroTik now provides hardware and software for