A group of elephants, Amboseli National Park, Kenya (© Ibrahim Suha Derbent/Getty Images)

This document provides guidelines and documents best current practice for operating authoritative DNS servers, recursive resolvers, and stub resolvers in a mixed IPv4/IPv6 environment. This document recommends that both authoritative DNS servers and…

This document specifies a framework that enables enterprise telephony Session Initiation Protocol (SIP) networks to solicit and obtain a

This document describes threats against cross-device flows along with practical mitigations, protocol selection guidance, and a summary of formal analysis results identified as relevant to the security of cross-device flows. It serves as a security…

Colorful homes line Nyhavn Canal, Copenhagen, Denmark (© emicristea/Getty Images)

This document defines three hybrid key agreement mechanisms for TLS 1.3 – X25519MLKEM768, SecP256r1MLKEM768, and SecP384r1MLKEM1024 – that combine the post-quantum ML-KEM (Module-Lattice-Based Key Encapsulation Mechanism) with an ECDHE (Ephemeral…

Joshua Tree National Park, California (© JJ Landscapes/Getty Images)

Jean-Marie Tjibaou Cultural Centre, New Caledonia (© Fabien Astre/Alamy)

Another systemd tip is the analyze timespan and calendar commands for timers. They’re good for planning out timer sequences or explaining them to the microsecond.

I think I told someone back when that the safest program might just be ‘hello world’ in the safest language of your choosing.

And that came out more like a joke, but there really was a note on how to achieve an almost perfect sandboxing score in systemd. The trick is to not relax.