- Oct 28, 2026Two clocks on the same internet
I read the certificate on 1,914 exposed RDP hosts. Two run post-quantum key exchange, six hundred sign with SHA-1, and half of them share a private key.
- Oct 16, 2026The check stops at the leaf
A position paper from Amazon and OpenSSL says the server ignores the client's signature algorithms on the chain. In August I measured OpenSSL honoring them. Both are right, one certificate deep.
- Sep 16, 2026The ring said Sent
A dead man's switch told its owner the delivery had gone out, during the window in which he could still have stopped it. Nothing had been sent. The backend was right the whole time, and the screen could have caused the event it was falsely reporting.