Cloudflare launched Automatic Key Exchange, a feature that probes origin servers to detect which key agreement algorithms they support before committing to one, rather than always guessing X25519 as before. This measurement-based approach reduced HelloRetryRequest occurrences from about 52% to 3.7% and cut roughly 150ms off connection latency at the 90th percentile, while also enabling post-quantum key exchange (X25519MLKEM768) automatically wherever origins support it.
blog.cloudflare.com
· 2026-09-14
A developer working on remote attestation for confidential VMs describes a technique for signing TLS handshake data using a private key generated and held inside a Trusted Platform Module, rather than storing it as a plain file on disk. The approach targets mutual TLS client authentication, where a stolen private key normally lets an attacker impersonate the machine anywhere that certificate is trusted.
bschaatsbergen.com
· 2026-09-06
Google's Android 17 release becomes the first mobile OS to support Encrypted Client Hello (ECH), a TLS feature that hides the destination website names during connection setup, preventing ISPs and network snoopers from seeing which sites users visit. The update also lets carriers disable 2G connections on devices, cutting off a common vector for malicious SMS-blaster attacks, alongside stricter local-network permissions and default Certificate Transparency.
zdnet.com
· 2026-08-31
OpenAI has updated its Python SDK to use HTTPX2 instead of HTTPX for both synchronous and asynchronous HTTP clients, with HTTPX2 now installed automatically alongside the openai package. Existing API calls, streaming, retries and timeout settings keep working without code changes, but the SDK no longer installs the httpx or certifi packages by default.
github.com
· 2026-08-28
Google's next Android release will support Encrypted Client Hello, a TLS extension that encrypts the hostname portion of the connection handshake so it can no longer be read in plain text. Paired with private DNS, this stops internet providers and Wi-Fi operators from easily seeing which sites or apps a device is contacting. The feature will be on by default for apps targeting Android 17 that use updated networking libraries like OkHttp, WebView, or HttpEngine.
bleepingcomputer.com
· 2026-08-27
A syslog server is a software tool or appliance that collects log messages—covering logins, reboots, firewall denials, hardware failures and more—from routers, switches, servers and other devices across a network. It receives these messages via UDP, TCP or encrypted TLS transport, then stores them in a searchable format organized by source, timestamp, severity and event type.
blog.greencloudvps.com
· 2026-08-24
GoKawiil