Sign in

Josh Aas

@joshaas.bsky.social
468 followers 41 following 8 posts

Head of ISRG (Let’s Encrypt, Divvi Up, Prossimo).

PostsRepliesMedia
Josh Aas @joshaas.bsky.social · 14/05/2025
We created a safer AV1 decoder, rav1d, by forking the dav1d decoder and rewriting the C code in Rust. It works great except our Rust is 5% slower than the C. We're not sure why so we're offering a $20k bounty to figure it out and make the Rust code faster. www.memorysafety.org/blog/rav1d-p...
memorysafety.org
$20,000 rav1d AV1 Decoder Performance Bounty
In March of 2023 we announced that we were starting work on a safer high performance AV1 decoder called rav1d, written in Rust. We partnered with Immunant to do the engineering work. By September of 2...
48026
Josh Aas @joshaas.bsky.social · 14/05/2025
Such great work from the Rustls devs.
020
Reposted by Josh Aas
Matthew Riley @matt.dev · 25/01/2025
Yesterday Chromium deleted our copy of `libavif` -- the last step of a year-long project replacing it with a new Rust library! :) chromium-review.googlesource.com/c/chromium/s...
chromium-review.googlesource.com
Gerrit Code Review
2356
Josh Aas @joshaas.bsky.social · 05/12/2024
Just announced the timeline for Let's Encrypt ending support for OCSP: letsencrypt.org/2024/12/05/e...
letsencrypt.org
Ending OCSP Support in 2025
Earlier this year we announced our intent to provide certificate revocation information exclusively via Certificate Revocation Lists (CRLs), ending support for providing certificate revocation informa...
020
Josh Aas @joshaas.bsky.social · 29/11/2024
Rustls multithreaded performance is fantastic. This is on an 80 core ARM machine.
Graph of Rustls handshakes per second per thread over many threads.
140
Josh Aas @joshaas.bsky.social · 27/11/2024
Ivan Ristić's TLS certificate monitoring service Hardenize is now Red Sift Certificates. Today they announced a free offering for monitoring up to 250 certificates, looks nice. blog.redsift.com/certificates...
blog.redsift.com
Never miss an expiring certificate with Red Sift Certificates Lite
With Certificates Lite, you can monitor up to 250 certificates and receive email alerts 7 days before expiration. It’s simple, effective, and free.
010
Reposted by Josh Aas
Sean McArthur @seanmonstar.com · 19/11/2024
hyper in curl needs a champion. A backing vendor or distro that wants it.❤️ Why? Report after report: Memory un-safety. Is. BAD. A #rustlang HTTP backend in #curl has potential to make the internet safer. 🦀 But it needs a champion to back it, or it will go away. 🚀 seanmonstar.com/blog/hyper-i...
seanmonstar.com
hyper in curl Needs a Champion
tl;dr - hyper in curl is nearly complete, but it needs a champion. Without a partner actively engaged that wants to enable and ship, it’s now on the path for...
37836
Reposted by Josh Aas
Joseph Lorenzo Hall, PhD @josephhall.org · 13/11/2024
Who’s going to @cendemtech.bsky.social’s #TechProm tomorrow? Be sure to connect with Sarah Gran from Let's Encrypt/ISRG. They work to keep hundreds of millions of websites safe, focus on private measurement and memory safety.
161
Reposted by Josh Aas
Kelsey Hightower @kelseyhightower.com · 26/10/2024
Let's Encrypt is one of my favorite tech organizations of all time. letsencrypt.org/about
letsencrypt.org
About Let's Encrypt
Let’s Encrypt is a free, automated, and open certificate authority (CA), run for the public’s benefit. It is a service provided by the Internet Security Research Group (ISRG). We give peop...
622312
Josh Aas @joshaas.bsky.social · 22/10/2024
Memory safe Rustls is now outperforming both OpenSSL and BoringSSL. So proud of what this team is doing. www.memorysafety.org/blog/rustls-...
memorysafety.org
Rustls Outperforms OpenSSL and BoringSSL
ISRG has been investing heavily in the Rustls TLS library over the past few years. Our goal is to create a library that is both memory safe and a leader in performance. Back in January of this year we...
0256
Reposted by Josh Aas
Dirkjan Ochtman @djc.ochtman.nl · 18/10/2024
After almost 6 years, I revived my blog to publish an overview of all the open source stuff I worked on last month. Updates from rustls, Hickory DNS, rustup, pyrtls, KumoMTA, Quinn, Askama, tokio, and instant-acme. dirkjan.ochtman.nl/writing/2024...
dirkjan.ochtman.nl
September on GitHub (2024) – Dirkjan Ochtman
083