… from the 90s.

Have you ever needed to make sure your website has a broken certificate? While many tools exist to help run an HTTPS server with valid certificates, there aren’t tools to make sure your certificate is revoked or expired. This is not a problem most people have. Tools to help manage certificates are always focused on avoiding those problems, not creating them. Let’s Encrypt is a Certificate Authority, and so we have unusual problems we need to solve.

Earlier this year, LWN featured an excellent article titled “Linux’s missing CRL infrastructure”. The article highlighted a number of key issues surrounding traditional Public Key Infrastructure (PKI)...

NEW (nobody) in Core - Security: PSM. Last updated 2025-06-16.

June 6, 2025 • University of Waterloo

Earlier this year we announced our intention to introduce short-lived certificates with lifetimes of six days as an option for our subscribers. Yesterday we issued our first short-lived certificate. Y...

Stats and interesting ships I saw come sailing in

This 3d printable model lets you expand the length and capacity of your XShot Nerf dart chain giving you the ability to load in as many darts as you want. - 3D

What if every month was a crossword? The 2025 Crossword Calendar is a folding wall calendar where each month's grid doubles as an American-style crossword puzzle, with one letter to write in each day'...

Prossimo has been investing in the memory safe, high performance TLS library called Rustls for nearly four years. During that time, we've seen Rustls improve and we've seen growing adoption. Organizat...

Wireless and firmware hacking, PhD life, Technology

On Thursday 404 Media that police were freaking out about mysteriously rebooting iPhones. Now multiple experts have found that Apple introduced code that reboots locked phones after a period of time.

OpenSSH release notes