Viewing profile — mcpherrinm

This shouldn’t be too much of a surprise, as TLS 1.3 has been out for many years and is widely adopted. I haven’t paid too much attention to the TLS WG lately (for obvious reasons …

While I didn't work on AWS, I did intern on the retail side of Amazon, and there's definitely this sort of monitoring in place. Surely somebody was paged. And even if not, this is …

She posted a video of her food loadout on instagram. It looked like a lot of dehydrated meals, and also a lot of peanut butter and tortillas. Here's a video of a day's food: https:…

She's got a lot of content posted on Instagram and TikTok, which includes packing food, videos of the boat inside and out, etc. https://www.instagram.com/yourowkelsey/reels/ https:…

So, in this case it wasn't correct to do so, but there is actually a current algorithm which uses floating point: Falcon (aka FN-DSA). https://keymaterial.net/2026/05/13/so-you-wan…

The underlying context is the US government only wants to buy systems which support pure post-quantum cryptography for use on top-secret networks, as part of the requirements of (v…

If a key is breached, the certificate can be revoked, but that revocation goes away once the certificate is expired. Expiry is a pretty fundamental part of the security model of ce…

It's the list here: https://docs.adyen.com/plugins#built-by-adyen

The best introduction to verifiable indexes I know of offhand is https://www.youtube.com/watch?v=gfrXTgmbS1s and https://github.com/transparency-dev/incubator/tree/main/vind...

Yes, many of the problems from CT are fixed. I wouldn't call it a "broken mess" though, as it has been relatively effective at detecting various problems, and to my knowledge hasn'…

On Linux and similar systems, I'm hoping github.com/rustls/upki will handle landmark distribution, and that non-browser clients can use that. Of course Rustls will support their ow…

Great question! Of course, we'll continue to provide more information as we firm up more details. This is an area that's not locked down yet, but I can give a sneak preview of what…

OpenSSH's Damien Miller has https://datatracker.ietf.org/doc/draft-miller-sshm-mldsa44-e... defining ssh-mldsa44-ed25519@openssh.com which seems more likely given the authorship.

Even without DNSSEC, the CAA record approach can help, as it requires MITMing between the CA and the DNS server, which may be harder in some cases than just MITMing a target site. …

CAA checking is mandatory, so you can always restrict to a given CA. To get complete control with DNSSEC, you also need the accounturi and validationmethod extensions (which you ne…

The post seems to be down so I am not quite sure what it says, but Co-Authored-By trailer is what Claude does. I'm not quite clear what you're suggested that's different from what …

It doesn't matter what the network is doing; the phone needs to disable 2g. There's various ways to get the phone to downgrade to 2g otherwise, eg https://montsecure.com/files/2021…

There's zero spam filtering interfering this way, and you can target your messages very precisely.

2g networks didn't have the phone verify the network, so yes they can do this. At least as of today, most phones have an option to turn off 2g but that isn't a default.

Yeah, Chrome only partly supports revocation (Not sure exactly the criteria, but our test sites don't match it).

Git bisect is one of the important reasons IMO to always squash-merge pull requests: Because the unit of review is the pull request. I think this is all Github's fault, in the end,…

Squash merge is the only reasonable way to use GitHub: If you update a PR with review feedback, you shouldn’t change existing commits because GitHub’s tools for showing you what ha…

Yes, it's just a number referenced in one of a few databases. > The 15-digit pet microchip is the international standard (see ISO 11784:1996 and ISO 11785:1996) https://www.aaha.or…