Android 17 hides the SNI, not your DNS or destination
Somebody on the network team pulls a capture off the guest wifi, filters for TLS, and half the hostnames are gone. The Android half. That is Android 17 doing what ...
Tag: tls
Cloudflare origin PQC: ML-DSA-44, OpenSSL 3.5.0
Run openssl genpkey -algorithm mldsa44 on a stock Ubuntu 24.04 box and it fails. Unknown algorithm, because that release ships OpenSSL 3.0 and this wants 3.5.0. One command, and you ...
Ship ML-DSA now, says Cloudflare, and here is what it costs
Picture a quantum computer big enough to forge the signature on google.com's certificate. It doesn't exist yet. When it does, every RSA and elliptic-curve cert on the web turns into ...
TLS 1.2 vs TLS 1.3: what changed and what to run in 2026
You upgrade nginx, point a checker at the host, and half your endpoints still answer TLS 1.2. Does that matter? Mostly no, and here's the short version: TLS 1.3 changed ...