LibreSSL 4.3.2 released https://www.undeadly.org/cgi?action=article;sid=20260527055600 #openbsd #libressl #ssl #tls #security #development #programming #web #cryptography #crypto #realcrypto #ibresoftware #freesoftware

Let's Encrypt just stopped the issuance of certificates after an (so far not publicly disclosed) incident:

https://letsencrypt.status.io/pages/incident/55957a99e800baa4470002da/69fe2d6698ca07050eb4b1b3

If anyone encounters issues today with failed certificate renewals: It's probably not your setup.

#letsencrypt #itsec #devops #linux #security #tls

LibreSSL 4.3.1 released https://www.undeadly.org/cgi?action=article;sid=20260420085845 #openbsd #libressl #libtls #ssl #TLS #crypto #cryptography #security #development

System Administration: Week 8: HTTPS

We sketched out the basics of HTTP in our last class, so necessarily we'll have to cover #TLS now. These slides illustrate the benefits (transport encryption, endpoint authentication) as well as some of the pitfalls (complexity, cert revocation, endpoint "authentication").

https://stevens.netmeister.org/615/08-https.pdf

#sysadmin #devops #sre

I know everybody is up in the Merkel Tree right now, but PQC affects more than just TLS. Here's a quick high-level summary of some other areas where we want to pay attention:

https://www.akamai.com/blog/security/post-quantum-cryptography-beyond-tls

#pqc #tls

I expect the adoption rate going forward to be slow: most of the large services support PQC at this point, but may require customers to opt in, and anybody not on one of the major CDNs will have to do the work themselves. I'll check again in another 6 months, but I'll be surprised if we exceed 50% at that point.

All of the above and a little bit more information about the current status of PQC adoption in this blog post:

https://www.netmeister.org/blog/pqc-use-2026-02.html

#pqc #tls

It's been almost 6 months since I last checked, so here's a quick update on what sites are using #PQC key exchanges in #TLS for HTTPS.

Overall, not much movement since September: by now, around 41% of the Top 1M Domains support PQC, up from ~39%:

Alt...

Count Percent1 Total 374,183 41.06% Out of those: X25519MLKEM768 374,152 99.99% SecP256r1MLKEM768 35,088 9.38% SecP384r1MLKEM1024 2,102 0.56% MLKEM1024 842 0.23%

\# chown qmaild:nofiles control/servercert.pem
\# chmod 640 control/servercert.pem
\# ln -s control/servercert.pem control/clientcert.pem
\# update_tmprsadh
\# /etc/rc.d/qmail restart

🔐