One of the most interesting recent privacy developments is the deployment of big two-hop IP blinding VPNs by companies like Apple and Google. These systems are designed to ensure that even those companies can’t link web requests to IP addresses.

Node excitement 😉 Congrats to @marcoippolito.dev on making it official: type-stripping in Node 25 is now declared to be stable 🎉 You can run: node index.ts The capabilities have not changed since Node 24. This is purely a maturity indicator.

Most AI traffic comes from massive shared, platforms. If one user is abusive, how do you rate-limit them without blocking everyone? IP blocks won't work. We explore private rate limits, a way to stop abuse without tracking users. blog.cloudflare.com/private-rate...

CPU vient de faier une release d'Halloween ! L'Horreur se niche dans l'open-space. Ose cliquer et écouter, tu n'en reviendras pas ! → cpu.pm/0223 En FM, DAB+, stream @radiofmr.bsky.social , podcast et écoute à la demande.

Mon conseil beauté pour @firefox.com ? “browser.tabs.insertAfterCurrent” à True. Nettement plus simple quand vous ouvres un nouvel onglet pour faire une recherche par rapport à l'actuel.

It's time to make HTTPS the web's default, and reap the full security benefit from years worth of HTTPS adoption! security.googleblog.com/2025/10/http...

We made MLS more decentralized! We are excited to share DMLS that brings fork resilience to the MLS protocol, solving a key challenge in distributed systems while maintaining Forward Secrecy. This work was made possible by @equalitie.bsky.social, who funded it as part of the Breakout program.

Some thoughts about how to schedule online meetings for a global organisation in an equitable way. https://www.mnot.net/blog/2025/10/26/equitable-meetings

PSA: we're aware that Signal is down for some people. This appears to be related to a major AWS outage. Stand by.

Looking to improve auditability of Web applications blog.cloudflare.com/improving-th...

Igalia is excited to announce a new commission from the Sovereign Tech Fund to advance the Servo web engine. www.igalia.com/2025/10/09/I...

Expanded CT log activity insights on Cloudflare Radar

Et voici la deuxième partie de notre rentrée radio ! Oui, on fait une deuxième fournée, c'est les dix ans de l'émission ! Sur Radio FMR (FM, DAB, streaming), podcast et écoute à la demande cpu.pm/0222

Oups ! Mais on a oublié de le dire : avec notre retour sont aussi revenu les news : cpu.dascritch.net/post/2025/09... Et pour rappel , samedi 11 à Artilect à 14h, on enregistre sur les FPGA

My newsletter today is about algorithms, culture, and celebrity beef. It's about how we're all complicit in this current festering cultural moment of ours. It features one of my spiciest theories ever that I do not want to spoil. So please click and read. www.leahreich.com/algorithmic-...

Sup frens I have a DHT protocol now: www.iroh.computer/blog/lets-wr...

"Lack of scalability is enough for Cloudflare to disqualify QKD outright: if a technology can’t bring security to the whole Internet, we’re not going to spend much time on it." blog.cloudflare.com/you-dont-nee...

Hosting a website on a disposable vape bogdanthegeek.github.io/blog/project...

CPU revient sur @radiofmr.bsky.social , podcast (sauf spautifaïlle) et à la demande sur cpu.pm Nous enregistrons Mercredi prochain à 19h au Tetalab (96 bis rue Bourbaki, métro Nougaro, Toulouse). Si vous souhaitez nous poser une question, faites le via cpu.dascritch.net/pages/Prendr...

Nous revenons bientôt à l'antenne de @radiofmr.bsky.social , en podcast sur toutes les plateformes honnêtes et à la ré-écoute sur notre site cpu.pm . Et en attendant, savez-vous que nous avons fait une émission sur les… trains ? cpu.pm/0195

Unauthorized TLS certificates were issued for 1.1.1.1 by a Certification Authority without permission from Cloudflare. These rogue certificates have now been revoked. Read our blog to see how this could affect you. https://cfl.re/47y9JqV

Les "lava lamp" utilisés par Cloudflare pour produire de l'aléatoire vraiment aléatoire : comment ça marche ? On a la chance d'avoir @thibmeu.com à Toulouse qui bosse sur le sujet et va nous expliquer ça en septembre ! www.meetup.com/fr-FR/gdg-to...

Privacy doesn't have to be slow. Great work from the team to improve the speed of Privacy Pass double spend checks. Now below 1ms

Nice

Bots can start authenticating to Cloudflare using public key cryptography, preventing them from being spoofed and allowing origins to have confidence in their identity. blog.cloudflare.com/verified-bot...

Making an end to end encrypted video calling app is easy. Just subscribe to @cloudflare.social blog, read MLS RFC, and write TLA+. Then enjoy the demo at e2ee.orange.cloudflare.dev

HTTP Message Signatures (RFC version) got merged into Mastodon github.com/mastodon/mas...

I wrote what turned into a small book with all my big takes on AI and the ways I'd like to see the debate improve andymasley.substack.com/p/all-the-wa...

Il y a un meetup sur Toulouse pour parler Internet et cryptographie ? Je pense à présenter les lampes à lave de Cloudflare. On a fait un article dessus il y a un an blog.cloudflare.com/harnessing-o...

Introducing Bases, a new core plugin that lets you turn any set of notes into a powerful database. With Bases you can organize everything from projects to travel plans, reading lists, and more. Bases are now available in Obsidian 1.9.0 for early access users.

Using Internet standards to improve the the way automed traffic / bots can interact with the world. Namely two methods: HTTP Signatures (RFC 9421) and req mTLS flag (draft-jhoyla-req-mtls-flag) blog.cloudflare.com/web-bot-auth/

Honest bots should have a way to identify themselves. To learn how it could be done, read on ⬇️ blog.cloudflare.com/web-bot-auth/

We are #hiring a Freelance Junior Product Manager to help us build the next generation of private & secure messaging. If you’re interested in joining our team, please apply today! For friends of secure messaging 🥷, please share our post with potential candidates.

There is the "technical should be hidden" team, and there is @porkbun.com suggesting you go implement TOTP RFC 6238. Love it

TLS

Understanding the threat model of runtime signature checking textslashplain.com/2025/03/31/r...

If you'd like to dive in fancy cryptography with step by step Python examples and diagrams, look no further Really accessible blog post from @cjpatton.bsky.social and @cryptojedi.bsky.social

I needed to record my terminal to demo a command line interface. VHS from @charm.sh does the job extremely well. github.com/charmbracele...

How cool is this?

I've had parts of this written down for a while - but I thought it was about time to document the detailed version of what happened during Balatro development localthunk.com/blog/balatro...

I could not find RFC 9000 (QUIC) varint implementation in JS. So I made one www.npmjs.com/package/quic...

If you are writing cli, take a look at clig.dev That's my goto resource, it's extra useful

We are excited to share that we are designing & implementing anonymous credentials within OONI Probe to protect and increase trust in OONI data. 🐙🛡️ Learn more through the literature review on anonymous credentials by Michele Orrù: ooni.org/post/2025-pr... 💫 #ooni #ooniprobe #anonymouscredentials

Il y a pile 10 ans, je faisais une réponse un peu WTF à un tweet d'Octave Klaba. La suite ? J'ai monté le bureau OVH de Toulouse avec une équipe de 10 personnes. Je n'y suis pas resté longtemps, mais aujourd'hui il y a 120 personnes chez OVH à Toulouse et je suis fier d'y avoir contribué. 1/2

Congrats on Kagi to integrate Privacy Pass! Instead of placing CAPTCHA on paid account that appear to be bot, they allow them to prove they have paid, and Kagi does not want to know anything else. Privacy Pass provides exactly this with unlinkability.

I wrote a post about how AI will interface with end-to-end encryption. TL;DR maybe not so well! blog.cryptographyengineering.com/2025/01/17/l...

He’s making a list…

The usual cache revalidation uses a cache lock. It turns out you can use some probabilities as well, with the revalidation probability increasing as time passes blog.cloudflare.com/sometimes-i-...

As of 5 hours ago, Ed25519 is now merged into the WebCrypto specification! #cryptography #ed25519 w3c.github.io/webcrypto/#e... Surprisingly, Safari and Firefox support it and not the Chromium-kingdom: developer.mozilla.org/en-US/docs/W... Perhaps this will move out of a feature flag soon!

One more feature being shipped brave.com/privacy-upda... by @shivankaul.bsky.social and team