Nice. Looks like ECH support got merged yesterday for Python 3.16
XFEDI
ActivityPubRemote profile
Alex
Security Engineer. I mostly post about IPv6 and pictures of my cats.
I help run Tor relays for @emeraldonion.
Also trying to bring more chaos to the UK with @MinistryOfChaos.
:rainbow_heart: :trans_heart:
Posts
Something I've been thinking about for a while is shipping my own minimal version of `ca-certificates` for my own systems.
My theory is that with the number of regional-specific CAs in the default trust store, if I trunk my connection with Zeek for a while and keep only the certs that I actually see used, I could probably remove 50%+ of the list.
Trying to read the CA cert inclusion policy because of Today's Massive Security Problem #1 but the site is offline due to Today's Massive Security Problem #2 :blobcat_thisisfine:
