iiinova — where your digital self keeps evolving

roland.zone @roland.zone · 22/09/2026

can someone just break ecc already so we can stop having this annoying fight on the ietf tls wg mailinglist

roland.zone @roland.zone · 09/09/2026

somewhat ironic that everyone is posting about how perelman is the only human to have solved a millennium prize problem when one of the main reasons he rejected the prize was because it ignored the work done by hamilton

010

roland.zone @roland.zone · 10/08/2026

i think all football shirts should be required, by law, to have a proper shirt collar. they just look better. thanks for coming to my ted talk

010

roland.zone @roland.zone · 03/08/2026

so many nice football kits completely ruined by the most horrendous sponsors imaginable

100

roland.zone @roland.zone · 31/07/2026

fifa collapsing the second it even looks in the direction of private equity is just... beautiful, a+ story writing, my compliments to the chef

040

roland.zone @roland.zone · 20/07/2026

ietf126 tlswg thunderdome could solve this

081

roland.zone @roland.zone · 18/07/2026

wild that this is the last game of the World Cup, definitely no more games after this

020

roland.zone @roland.zone · 15/07/2026

the archetypical england fan experience

010

roland.zone @roland.zone · 14/07/2026

france playing on bastille day, the fix is in

110

roland.zone @roland.zone · 12/07/2026

no football until tuesday, someone should really do something about that

020

roland.zone @roland.zone · 08/07/2026

excited to talk about the (mostly) boring vulns we have, with a slight digression about how LLMs have completely turned the way vulns are found upside down 🙃

0254

Reposted by @roland.zone

GopherCon @gophercon.com · 08/07/2026

If Go is memory-safe, where do its vulnerabilities come from? 🔒 Go Security Team Lead @roland.zone shares how the Go team identifies, responds to, and learns from vulnerabilities across the Go ecosystem. Discover what those lessons mean for building more secure Go software. 🎟️ gophercon.com

071

roland.zone @roland.zone · 14/03/2026

i'm sorry, i have zero interesting in consuming a "companion podcast", i'd like to watch your slop tv show, derive my own opinions, and then immediately forget everything about it 30 minutes later

030

roland.zone @roland.zone · 03/03/2026

did something very silly, may have some at gophercon this year if you ever sent us a vulnerability report or contributed to Go crypto (or are just nice to me) thanks to @ljamesart.bsky.social who did the great art!

5816

roland.zone @roland.zone · 20/01/2026

genuine question: why are the HTTPS page load numbers so much lower on Linux? is it really just people doing local development, or is there some other weird thing causing this? transparencyreport.google.com/https/overview

transparencyreport.google.com

Google Transparency Report

130

roland.zone @roland.zone · 05/11/2025

things can actually maybe be good, it turns out

020

roland.zone @roland.zone · 04/11/2025

i have opinions about the ffmpeg security thing but i'm not going to post them, for my own sanity (but i am posting about not posting about it)

140

roland.zone @roland.zone · 25/10/2025

trying to come up with a silly toy cryptology problem for something

020

roland.zone @roland.zone · 23/09/2025

genuinely confused why people are so interested in this, but hey whatever

Screenshot of the front page of Hacker News showing a Go CL (https://go-review.googlesource.com/c/go/+/674077) that adds Valgrind support at the #2 spot

3160

roland.zone @roland.zone · 19/09/2025

I did a talk at the UK GopherCon last month about what my team does, and I only let my laptop fall asleep twice! www.youtube.com/watch?v=oLtq...

youtube.com

Go Security – Past, Present, and Future - Roland Shoemaker

YouTube video by GopherCon UK

1208

Reposted by @roland.zone

Go @golang.org · 16/09/2025

Hi folks, it’s survey time! We’d love to learn more about how you use Go and what could be improved. Share your feedback via our annual developer survey at google.qualtrics.com/jfe/form/SV_.... It should take 10 - 20 minutes to complete, and will be open through September 30. Thank you! #golang

google.qualtrics.com

Go Developer Survey 2025

Share your feedback about developing software with Go.

05731

roland.zone @roland.zone · 16/09/2025

I recently passed my 5 year anniversary at Google on the Go team (thanks to them for reminding me), which also means it's been about 10 years since I first joined the Let's Encrypt team. It's been amazing to see the projects grow over those years, and I couldn't be prouder to have worked on them.

1201

roland.zone @roland.zone · 13/08/2025

signs you’re having a real normal one

150

roland.zone @roland.zone · 10/08/2025

explaining post tour criteriums to non-cycling people makes you sound fully insane

120

roland.zone @roland.zone · 30/06/2025

I don't think they post here, but excited to be talking about what the Go Security team does, and why (hopefully) you don't hear much about us, at GopherCon UK in August.

🔥Keynote Speaker Announcement

We are delighted to announce that Roland Shoemaker will be a key note speaker at this year's #gopherconuk.

Roland leads the Go Security team at Google, working on cryptography, transport security, vulnerability triage, and generally keeping Go secure. Before working on the Go team, he worked on the Let's Encrypt project building the certificate authority software which now issues millions of certificates each day.

Despite its 15 year history, Go has had a rather uneventful security history. In his keynote, Roland will talk about why that is, some of the mistakes made, and what they learnt. Along with what he's working on now, and what’s on the horizon to make Go an even better, safer language for the next 15 years.

Buy your tickets over on our website & join Roland as he opens Day 1 of our conference on 13th August 2025.

🎟️ https://buff.ly/Azghzwp

2357

Reposted by @roland.zone

Filippo Valsorda @filippo.abyssdomain.expert · 20/06/2025

Here's something I am very excited about: Photosynthesis! 🌱☀️ A proposal to have CAs run transparency logs and make X.509 certificates out of Merkle Tree inclusion proofs. This is similar to how CT would have worked in an ideal world, and it solves the problem of PQC sizes in logs and handshakes.

mailarchive.ietf.org

[TLS] Photosynthesis, an update to Merkle Tree Certificates

Photosynthesis combines the Static CT API with the ideas in Merkle Tree Certificates.

14012

roland.zone @roland.zone · 21/05/2025

what a successful go tree freeze day looks like

1181

roland.zone @roland.zone · 21/03/2025

i swear to god amazon does this shit just so they can say they'll deliver stuff quickly and then they're just like ohhh no oopsie we scanned it as delivered two days early our bad

020

roland.zone @roland.zone · 14/03/2025

the democrats do not give a shit, they're just capitulating on everything

110

roland.zone @roland.zone · 10/03/2025

do you have games on your phone

0100

roland.zone @roland.zone · 25/02/2025

I suspect "I'm gonna open source it on a Chinese server" is going to be a permanent addition to my lexicon

030

roland.zone @roland.zone · 01/02/2025

very cool to see the team continuing to push boulder to new heights, I don’t think any of us could’ve predicted it’d be responsible for issuing millions of certs a day in 2015 letsencrypt.org/2025/01/30/s...

letsencrypt.org

Scaling Our Rate Limits to Prepare for a Billion Active Certificates

Let’s Encrypt protects a vast portion of the Web by providing TLS certificates to over 550 million websites—a figure that has grown by 42% in the last year alone. We currently issue over 340,000...

0180

roland.zone @roland.zone · 30/01/2025

getting faded off that NIST Reference Material 8210 shop.nist.gov/ccrz__Produc...

shop.nist.gov

000

roland.zone @roland.zone · 15/01/2025

the number of xiaohongshu screenshots people are posting of comments they think are from people in china marked "美国" is extremely funny

030