HTTP/3 and QUIC: Past, Present, and Future

You may have seen the announcements over the past two weeks — the IETF QUIC RFCs have been published! That leads to a lot of questions, depending on how closely you’ve followed this space. You might be wondering what this means to you, or you might think QUIC has been an established thing for years now. And how does HTTP/3 fit into this? Is HTTP/3 another name for QUIC? Continue reading HTTP/3 and QUIC: Past, Present, and Future

Why certificate automation is no longer just “nice to have”

We’ve all heard the shocking stories about the outages at what should have been bullet-proof organizations like Microsoft, Spotify, and a California Covid-19 testing site. These (and many other) recent outages are attributed to undocumented insta… Continue reading Why certificate automation is no longer just “nice to have”

Internet Society and IETF agreement ensures the continuity of critical work in creating open standards

The Internet Society and the Internet Engineering Task Force (IETF) announced a new long term strategic agreement that will ensure the continuity of the IETF’s critical work in creating open standards that make the Internet work better. The IETF has be… Continue reading Internet Society and IETF agreement ensures the continuity of critical work in creating open standards

Let’s Encrypt issues one billionth free certificate

Thanks to this flood of free certificates, the web is a lot more encrypted than it was a few years ago. Continue reading Let’s Encrypt issues one billionth free certificate

The Vulnerability Disclosure Process: Still Broken

Despite the advent to bug bounty programs and enlightened vendors, researchers still complain of abuse, threats and lawsuits. Continue reading The Vulnerability Disclosure Process: Still Broken