Post-quantum key establishment has moved from standards into deployment. Post-quantum authentication has not moved nearly as far, and specification work is no longer the only constraint. The IAB is ho...

TLS 1.3 runs its entire key schedule on HKDF over SHA-2. This document defines an extension that replaces that schedule with one built on an extendable-output function (XOF): the negotiated KDF gove...

Search IETF mail list archives

Breaking the DNS Dependencych-22" class="toc-anchor">ECH’s Catch-22thing-strange-in-the-dns" href="#something-strange-in-the-dns" class="toc-anchor">Something Strange in the DNS use it. That’s the fun...

Lessons Learned-ech-traffic-stuck-out" href="#why-ech-traffic-stuck-out" class="toc-anchor">Why ECH Traffic Stuck Out">The Paradox of Privacy Adoption: Standing Out to Disappearss="toc-anchor">Case St...

In 2019, Mark Zuckerberg called privacy the future of social networking. Not anymore

Referencesent-deployment-and-adoption" href="#current-deployment-and-adoption" class="toc-anchor">Current Deployment and Adoptionor">Trial by Firewall-security-systems" href="#adapting-network-securit...

The definitive job board for cryptography professionals. Find opportunities in post-quantum cryptography, zero-knowledge proofs, HSM, TLS/PKI, and applied cryptographic research.

Real World Crypto Symposium

Standards engineers discussing support for human rights in technical standards This July, just before a week of meetings on internet protocol details in Madrid, CDT invited a group of engineers — leaders from industry and civil society and participants in the Internet Engineering Task Force and World Wide Web Consortium — to a workshop organized […]

Anthropic research on data-poisoning attacks in large language models

Referencesent-deployment-and-adoption" href="#current-deployment-and-adoption" class="toc-anchor">Current Deployment and Adoptionor">Trial by Firewall-security-systems" href="#adapting-network-security-systems" class="toc-anchor">Adapting Network Security Systemsy-sni-became-the-last-privacy-gap" class="toc-anchor">Why SNI Became the Last Privacy Gapre-metadata-leaks" class="toc-anchor">Background: Where Metadata Leakste, whether governments like it or not. Encrypted Client Hello (ECH) is nearing final IETF standardization [1]. It closes the last remaining metadata leak in HTTPS connections by encrypting the Server Name […]

Around the world, voters have been forced to make major decisions about their future while navigating a censored, distorted, and unreliable information space.

Our 18-month investigation reveals how digital identity systems create brittle societies. This foreword traces eight case studies that demonstrate the catastrophic failures of digital identity across ...

Real World Crypto Symposium

🏗️ A TALE OF THREE BRIDGES AND THE COMING QUANTUM RECKONING Two months ago in Berlin I delivered a keynote on post‑quantum cryptography at Visa Risk Reset, an invitation‑only summit for CROs, CISOs, r...

June 30, 2025 The man gazes earnestly into the camera, the glow from his computer monitor reflecting off his black-rimmed glasses. “This is more than just a cultural moment,” he says with a smile. “It...

YouTube video by Real World Crypto

Overview of CFRG process and best practices

Lack of encryption was one SMS shortcoming that RCS was created to solve.

Mozilla Security Research Summit San Diego 2025

We’re rebuilding the internet so that you can say goodbye to your VPN and never again make the tradeoff between the content you want and privacy. Introducing URnetwork, a decentralized network powered...

Real World Crypto Symposium

Real World Crypto Symposium

How I tracked myself down using leaked location data in the in-app ads, and what I found along the way.

This podcast series examines how internet censorship shapes global access to information and the technical safeguards needed to ensure a free and open web. We dive into the mechanics of filtering, cir...