macOS 27 ships a 2 year old version of libcurl with a git-impacting bug

For FastCGI's 30th birthday, let's look at how it avoids the security problems inherent in HTTP reverse proxying

Unless you're operating a DNS-over-TLS or DNS-over-HTTPS resolver, you should not use IP address certificates.

I've detected 16 CAs issuing certificates which rely on CT logs that are not recognized by all browsers

Introducing Source Spotter, a Go Checksum Database auditor and Go toolchain reproducer

Is SQLite durable by default? What settings guarantee durability? The documentation and even comments from its creator give conflicting answers.

The build script in ca-certificates incorrectly omits CA roots with a "DistrustAfter" attribute. See this fix in curl: https://github.com/curl/curl/commit/448df98d9280b3290ecf63e5fc9452d487f41a7c#diff...

Non-browser clients don't properly handle the Distrust After date