Dhole Moments

Cryptography Engineering Has An Intrinsic Duty of Care

Cryptographic Issues in Matrix’s Rust Library Vodozemac

Is End-to-End Encryption Optional For Large Groups?

On Discord Alternatives

Software Assurance & That Warm and Fuzzy Feeling

Practical Collision Attack Against Long Key IDs in PGP

Everything You Need to Know About Email Encryption in 2026

The Revolution Will Not Make the Hacker News Front Page

Announcing Key Transparency for the Fediverse

Moving Beyond the NPM elliptic Package

The Dreamseeker’s Vision of Tomorrow

Are You Under the Influence? The Tail That Wags The Dog

It’s a Cold Day in Developer Hell, So I Must Roll My Own Crypto

Barking Up The Ratchet Tree – MLS Is Neither Royal Nor Nude

Improving Geographical Resilience For Distributed Open Source Teams with FREEON

Age Verification Doesn’t Need to Be a Privacy Footgun

Against the Censorship of Adult Content By Payment Processors

Jurisdiction Is Nearly Irrelevant to the Security of Encrypted Messaging Apps

Checklists Are The Thief Of Joy

Furries Need To Learn That Sunlight Is The Best Disinfectant

What Does It Even Mean To Be “Great” Anyway?

Tech Companies Apparently Do Not Understand Why We Dislike AI

Retrospective: Five Years Blogging About Cryptography as a Gay Furry Online

The Authenticity Drought

The Practical Limitations of End-to-End Encryption

Post-Quantum Cryptography Is About The Keys You Don’t Play

On The Insecurity of Telecom Stacks in the Wake of Salt Typhoon

Shaming Isn’t Shielding: The Moral Panics That Cry Wolf

Reviewing the Cryptography Used by Signal

Hell Is Overconfident Developers Writing Encryption Code

Too Many People Don’t Value the Time of Security Researchers