"Lack of scalability is enough for Cloudflare to disqualify QKD outright: if a technology can’t bring security to the whole Internet, we’re not going to spend much time on it." blog.cloudflare.com/you-dont-nee...

Hosting a website on a disposable vape bogdanthegeek.github.io/blog/project...

CPU revient sur @radiofmr.bsky.social , podcast (sauf spautifaïlle) et à la demande sur cpu.pm Nous enregistrons Mercredi prochain à 19h au Tetalab (96 bis rue Bourbaki, métro Nougaro, Toulouse). Si vous souhaitez nous poser une question, faites le via cpu.dascritch.net/pages/Prendr...

Nous revenons bientôt à l'antenne de @radiofmr.bsky.social , en podcast sur toutes les plateformes honnêtes et à la ré-écoute sur notre site cpu.pm . Et en attendant, savez-vous que nous avons fait une émission sur les… trains ? cpu.pm/0195

Unauthorized TLS certificates were issued for 1.1.1.1 by a Certification Authority without permission from Cloudflare. These rogue certificates have now been revoked. Read our blog to see how this could affect you. https://cfl.re/47y9JqV

Les "lava lamp" utilisés par Cloudflare pour produire de l'aléatoire vraiment aléatoire : comment ça marche ? On a la chance d'avoir @thibmeu.com à Toulouse qui bosse sur le sujet et va nous expliquer ça en septembre ! www.meetup.com/fr-FR/gdg-to...

Privacy doesn't have to be slow. Great work from the team to improve the speed of Privacy Pass double spend checks. Now below 1ms

Nice

Bots can start authenticating to Cloudflare using public key cryptography, preventing them from being spoofed and allowing origins to have confidence in their identity. blog.cloudflare.com/verified-bot...

Making an end to end encrypted video calling app is easy. Just subscribe to @cloudflare.social blog, read MLS RFC, and write TLA+. Then enjoy the demo at e2ee.orange.cloudflare.dev

HTTP Message Signatures (RFC version) got merged into Mastodon github.com/mastodon/mas...

I wrote what turned into a small book with all my big takes on AI and the ways I'd like to see the debate improve andymasley.substack.com/p/all-the-wa...

Il y a un meetup sur Toulouse pour parler Internet et cryptographie ? Je pense à présenter les lampes à lave de Cloudflare. On a fait un article dessus il y a un an blog.cloudflare.com/harnessing-o...

Introducing Bases, a new core plugin that lets you turn any set of notes into a powerful database. With Bases you can organize everything from projects to travel plans, reading lists, and more. Bases are now available in Obsidian 1.9.0 for early access users.

Using Internet standards to improve the the way automed traffic / bots can interact with the world. Namely two methods: HTTP Signatures (RFC 9421) and req mTLS flag (draft-jhoyla-req-mtls-flag) blog.cloudflare.com/web-bot-auth/

Honest bots should have a way to identify themselves. To learn how it could be done, read on ⬇️ blog.cloudflare.com/web-bot-auth/

We are #hiring a Freelance Junior Product Manager to help us build the next generation of private & secure messaging. If you’re interested in joining our team, please apply today! For friends of secure messaging 🥷, please share our post with potential candidates.

There is the "technical should be hidden" team, and there is @porkbun.com suggesting you go implement TOTP RFC 6238. Love it

TLS

Understanding the threat model of runtime signature checking textslashplain.com/2025/03/31/r...

If you'd like to dive in fancy cryptography with step by step Python examples and diagrams, look no further Really accessible blog post from @cjpatton.bsky.social and @cryptojedi.bsky.social

I needed to record my terminal to demo a command line interface. VHS from @charm.sh does the job extremely well. github.com/charmbracele...

How cool is this?

I've had parts of this written down for a while - but I thought it was about time to document the detailed version of what happened during Balatro development localthunk.com/blog/balatro...

I could not find RFC 9000 (QUIC) varint implementation in JS. So I made one www.npmjs.com/package/quic...

If you are writing cli, take a look at clig.dev That's my goto resource, it's extra useful

We are excited to share that we are designing & implementing anonymous credentials within OONI Probe to protect and increase trust in OONI data. 🐙🛡️ Learn more through the literature review on anonymous credentials by Michele Orrù: ooni.org/post/2025-pr... 💫 #ooni #ooniprobe #anonymouscredentials

Il y a pile 10 ans, je faisais une réponse un peu WTF à un tweet d'Octave Klaba. La suite ? J'ai monté le bureau OVH de Toulouse avec une équipe de 10 personnes. Je n'y suis pas resté longtemps, mais aujourd'hui il y a 120 personnes chez OVH à Toulouse et je suis fier d'y avoir contribué. 1/2

Congrats on Kagi to integrate Privacy Pass! Instead of placing CAPTCHA on paid account that appear to be bot, they allow them to prove they have paid, and Kagi does not want to know anything else. Privacy Pass provides exactly this with unlinkability.

I wrote a post about how AI will interface with end-to-end encryption. TL;DR maybe not so well! blog.cryptographyengineering.com/2025/01/17/l...

He’s making a list…

The usual cache revalidation uses a cache lock. It turns out you can use some probabilities as well, with the revalidation probability increasing as time passes blog.cloudflare.com/sometimes-i-...

As of 5 hours ago, Ed25519 is now merged into the WebCrypto specification! #cryptography #ed25519 w3c.github.io/webcrypto/#e... Surprisingly, Safari and Firefox support it and not the Chromium-kingdom: developer.mozilla.org/en-US/docs/W... Perhaps this will move out of a feature flag soon!

One more feature being shipped brave.com/privacy-upda... by @shivankaul.bsky.social and team

I like the characterization of “no permanent authority”. This is also why I’m working on transparency logs: centralization just works better so it wins in the market; to protect users you need the ability to exit, and accountability to know when to do it. The latter is what tlogs provide.

Hello, Bluesky users! I curate and maintain list of resources on testing distributed systems. You might have seen it before. It's a good one, if I may say so myself. asatarin.github.io/testing-dist...

NIST has standardized four post-quantum signature schemes so far, and they’re not done yet: there are fourteen new candidates in the running for standardization. In this blog post we take measure of them and discover why we ended up with so many PQ signatures. blog.cloudflare.com/another-look...

Doing some CBOR for the web again. The little CBOR viewer browser extension still improves my dev experience. github.com/thibmeu/cbor...

Using DNS as handle is nice. Do people know if (and how) it interacts with DNSSEC?