@djb

They're also getting really testy about us "regular Joes" showing up and voting against publication of the deliberately-weak solo PQ recommendation.

You can practically feel their frustration - "We stuffed this list to pass this vote, and they're stuffing it against us!".

The blatant hypocrisy of the "not standards-track" thing bugged me too when it came through the list.

Anyone who follows me and cares about cryptography or their privacy: read djb's short blurb here:

https://nsa.2026.action.cr.yp.to/

There's action you can take to try to prevent the NSA's attempt to get the world to standardize on deliberately weakened cryptography in TLS - i.e. the thing that protects every important web connection on the planet. They have form for doing this in the past, and are trying again.

There are other links in the above page for more information.

#TLS #HTTP #HTTPS #cryptography #privacy

relayd(8) and httpd(8) TLS settings update. https://www.undeadly.org/cgi?action=article;sid=20260629165750 #openbsd #relayd #httpd #tls #ssl #tlsv13 #tlsv12 #security #cryptography #crypto

LibreSSL 4.3.2 released https://www.undeadly.org/cgi?action=article;sid=20260527055600 #openbsd #libressl #ssl #tls #security #development #programming #web #cryptography #crypto #realcrypto #ibresoftware #freesoftware

Let's Encrypt just stopped the issuance of certificates after an (so far not publicly disclosed) incident:

https://letsencrypt.status.io/pages/incident/55957a99e800baa4470002da/69fe2d6698ca07050eb4b1b3

If anyone encounters issues today with failed certificate renewals: It's probably not your setup.

#letsencrypt #itsec #devops #linux #security #tls

LibreSSL 4.3.1 released https://www.undeadly.org/cgi?action=article;sid=20260420085845 #openbsd #libressl #libtls #ssl #TLS #crypto #cryptography #security #development

\# chown qmaild:nofiles control/servercert.pem
\# chmod 640 control/servercert.pem
\# ln -s control/servercert.pem control/clientcert.pem
\# update_tmprsadh
\# /etc/rc.d/qmail restart

🔐