HTTPS in the real world
In cryptography, trust is mathematically provable. Everything else is just faith.
Topics /
The most popular blog posts about networking & internet on Hacker News. 3,019 posts.
In cryptography, trust is mathematically provable. Everything else is just faith.
[BROKEN LINK: blog/google-cloud-s-outage-should-not-have-happened-and-they-seem-to-be-missing-the-point-on-how-to-avoid-it-in-the-future.pre-processed.org], another global IT outage happened (dèjá vu strikes again in our industry). This time at cloudflare(Prince 2025). Again, taking down large swaths of the internet…
Yes, some people do it, and yes, for some people, it works fine. But..... If you're standing up a new server and it has an IPv6 IP address, ...
OpenSSL's inadequate documentation, confusing key formats, and deprecated interfaces make it difficult to use, despite its importance.
Dropbear is a small and lightweight SSH server and client that can replace OpenSSH on any POSIX platform such as GNU / Linux, * BSD, Cygwin … Dropbear is free software since it is released under MIT-style licenses.
Technical summaries of developments in IRC software and protocol specifications during the second half of 2021.
Daniel Kulesz's personal website
The Internet Engineering Task Force (IETF), the body that sets standards for the Internet, has...
hi! Yes, it's been a while since I posted here and yes, it's been a while since I was actively working on FreeBSD's wireless stack. Life's...
This specification defines a new HTTP method, QUERY, as a safe, idempotent request method that can carry request content.
Well the news is out, I won’t explain the method for reasons, but our code warriors have a new fight. After requesting the SU password, they were told flat out it doesn’t exist and refe…
This comprehensive guide to implementing AV1 encoding includes a step-by-step guide and questions you should consider when adding AV1 encoding to your workflow.
Mostly to make use of an animation I made for a different blog post that hasn't materialised, let me take a moment to explain to you the fundamental technical difference between 'streaming' and 'downloading'. Which won't take long... because there isn't one!
Technology and Law Community "Masaar” documented the blocking of the Telegram website and application by the Egyptian authorities on 22 October 2020. The authorities blocked Telegram on three of the Internet service networks operating in Egypt. These networks included “We”, “Vodafone” and “Orange”. Masaar learned…
Before I begin, I want to say that WebSockets are great. I’ve even implemented RFC 6455 myself in Zurl and Pushpin, which are used by Fanout Cloud.However, a...
This is a lightly edited transcript of my keynote over at NANOG 83, so please accept my apologies if some of the wording is not (yet) as clear as it should be! The original video, including Q&A can be found on NANOG’s Youtube channel Hello, and welcome to this presentation on who controls the internet, and if they…
The Wikimedia Foundation is happy to announce that we are implementing HTTPS to encrypt all traffic on Wikimedia sites. With this change, nearly half a billion monthly visitors on Wikipedia and its…
Microsoft Emergency Bulletin: Unauthorized Certificate used in "Flame" , Author: Johannes Ullrich
If you’ve read this blog before, you know that secure messaging is one of my favorite topics. However, recently I’ve been a bit disappointed. My sadness comes from the fact that lately …
We’re building an open source alternative to AWS. For IPv4 assignment and firewall rules, we use Linux’s Netfilter / Nftables. This subsystem provides a powerful way to handle packets addressed to the host. We recently came across flowtables - a network acceleration feature in the Linux kernel that works like a…
Dotted around London, there are a number of private hotels that aren’t the sort of hotel you might expect – they’re needed to make mobile phones work on the London Underground.
Proceed at your own risk! (... it's worth it)
In June 2021, we announced our continued commitment and innovation towards the enablement of IPv6 on AWS. Today, we take a monumental step forward with the ability to create an IPv6-only architecture on AWS. With this launch, Amazon Virtual Private Cloud (VPC) now allows you to create IPv6-only subnets in your…