Renewed my @fastmail.com subscription after 2 years of it just working and no other bullshit. Feels good to pay for stuff like this.
Renewed my @fastmail.com subscription after 2 years of it just working and no other bullshit. Feels good to pay for stuff like this.
Forty years ago, 21 people gathered for the first meeting of what became the IETF. Today, nearly 8000 IETF participants from around the world collaborate in more than 100 working groups and every day billions of people use technologies developed in the IETF. https://www.ietf.org/blog/ietf-40/
Depending on the HTTP version, you can override priroty scheduler with more fine grain control via workers / origin header e.g. invoke a more serial order, or do banded round robin
Nice. We use aasvg for some IETF docs
A demon with green lucrative pants on being dragged along the floor .
I'm watching Angel as a mindless guilty pleasure. In S2 E9, they seem to have forgotten to green screen the demon's lower half after it got chopped off. Not sure if this is due to 16:9 aspect or if the booboo was aired
HTTP/2-based DoS attacks are here to stay. Many implementations are hardened to them. Quirky behaviour can trigger defenses and cause ENHANCE_YOUR_CALM.
Read one of my latest trips down a debugging rabbit hole.
blog.cloudflare.com/go-and-enhan...
Glad to announce that my team at @cloudflare.social released a 1.0.0 version of a cross-browser web performance testing agent that supports
Chrome, Firefox, Safari and Edge.
Thank you to @tkadlec.bsky.social for making it happen and writing most of the code so far!
github.com/cloudflare/t...
About 6 months ago Louis Navarre reached out to report some DoS-related vulnerabilities in quiche's ack processing. We fixed it up and saw no evidence that the vulnerabilities had been exploited. Check out the deep dive blog post: blog.cloudflare.com/defending-qu...
Ed Davey pointing at Tambo
Rambo thumbs upping Ed Davey
It would be funny it wasn't actually true
Android notification from YouTube for IETF session
Hehe
Insightful!
Watching Usyk vs. Dubois squashed into a sports bar booth in Porto with 4 randoms, 2 from London, 2 from Ukraine, was not on the bingo card. But it all worked out.
BBC article about porn age checks, festure image a man in bed on his phone
BBB news article about the Co-Op leak of 6.5 million customers data
I can predict how these new age checks are going to go using two pictures
I've heard of crackpot science.
I guess the future equivalent is grokbot science
I'm excited to announce I'll be at gRPC Conf on August 26 2025 to present how Cloudflare built its gRPC support first launched in 2020, and how we've been adding gRPC over HTTP/3 support lately.
Session details at: grpcconf2025.sched.com/event/26BMY/...
Hot off the press, happy to announce the adoption and publication of datatracker.ietf.org/doc/html/dra...
Unencoded Digest is one of the missing pieces for certain use cases like the W3C signature-based integrity work. Helping to cover cases where encoding and transform independence are paramount
An IRTF Retrospective β in which I reflect upon my time as Chair of the IRTF csperkins.org/standards/20...
You should check out Sultans of Swim
Wouldn't call it vibe coding but I've been using some AI to add features to throwaway test toys written in Go to Get Shit Done.
Look out for some future updates about the $thing these toys are helping to make robust.
Using Internet standards to improve the the way automed traffic / bots can interact with the world. Namely two methods: HTTP Signatures (RFC 9421) and req mTLS flag (draft-jhoyla-req-mtls-flag)
blog.cloudflare.com/web-bot-auth/
Enjoying Kagi quite a bit
AI slop has gotta stop.
Hysterical* thing with this bullshit report to curl's hackerone (hackerone.com/reports/3125...) "HTTP/3 Stream Dependency Cycle Exploit" is we took great pains to standardize a priortization scheme that entirely did away with stream dependencies.
* not the jovial definition
My team at Cloudflare are hiring mid-level and senior engineers to help us go deep on network protocols (HTTP, QUIC, TLS etc.) as we build and deploy our new Rust-based proxy.
More details (including location) over on LinkedIn: www.linkedin.com/posts/lucasp...
Check out this cool shit
Forget Vibe coding, the new buzz is Weiss Posting
What's your process for bluesky posts?
Paraphrasing Rick Rubin and saying "I have no technical ability. And know nothing about protocol minutae."
Gearing up to chair the next QUIC WG meeting be like
Multipath Extension for QUIC is now in Working Group Last Call.
datatracker.ietf.org/doc/draft-ie...