LibreSSL 4.2.2 and 4.3.3 released https://www.undeadly.org/cgi?action=article;sid=20261007052424 #openbsd #libressl #openssl #tls #ssl #https #cryptography #security #crypto #portablesoftware #freesoftware #libresoftware

What if I were to tell you that Trump could knock any (or all) of over 20 million¹ European web sites off the Web tomorrow by picking up the phone to one US organisation: Let’s Encrypt.

We desperately need an independent, not-for-profit ACME provider in the EU paid for by our taxes.

CC @EUCommission #sovereignty

¹ This is just based on one firm’s analytics (https://trends.builtwith.com/websitelist/LetsEncrypt/EUROPE). Others put LE use at 50-60% of all web sites.

#TLS #web #EU #tech #sovereignty #US #fascism

@djb

They're also getting really testy about us "regular Joes" showing up and voting against publication of the deliberately-weak solo PQ recommendation.

You can practically feel their frustration - "We stuffed this list to pass this vote, and they're stuffing it against us!".

The blatant hypocrisy of the "not standards-track" thing bugged me too when it came through the list.

Anyone who follows me and cares about cryptography or their privacy: read djb's short blurb here:

https://nsa.2026.action.cr.yp.to/

There's action you can take to try to prevent the NSA's attempt to get the world to standardize on deliberately weakened cryptography in TLS - i.e. the thing that protects every important web connection on the planet. They have form for doing this in the past, and are trying again.

There are other links in the above page for more information.

#TLS #HTTP #HTTPS #cryptography #privacy

relayd(8) and httpd(8) TLS settings update. https://www.undeadly.org/cgi?action=article;sid=20260629165750 #openbsd #relayd #httpd #tls #ssl #tlsv13 #tlsv12 #security #cryptography #crypto

\# chown qmaild:nofiles control/servercert.pem
\# chmod 640 control/servercert.pem
\# ln -s control/servercert.pem control/clientcert.pem
\# update_tmprsadh
\# /etc/rc.d/qmail restart

🔐