TLS Certificates Get A 64-Day Clock
Let’s Encrypt will shorten default certificates in February. The real test is whether renewal, deployment, reload, and public verification form one automated loop.
// Topic
Internet Infrastructure
The Internet's Root Key Gets a New Signer
On October 11, the DNS root switches to KSK-2024. The cryptography is ready; resolver operators need to prove their trust anchors made the trip.
Cloudflare Pulls 100TB Out Of The Hash Ring
Cloudflare recovered more than 100TB of RAM by changing a Rust data layout, trimming virtual nodes, and rolling out a smaller cache-routing ring without a global flush.
pvcli Gives OHTTP A Debugging Handle
Cloudflare's pvcli gives OHTTP, CONNECT proxying, and future MASQUE work a curl-like test harness for privacy-preserving protocols.
Kubernetes Failover Needs A Service Plane
A CNCF Linkerd multicluster demo shows why spare Kubernetes clusters need service identity, routing, and failure behavior to matter.
BGP Origin Loses Its Alibi
Cloudflare found widespread BGP ORIGIN rewrites, showing how an old routing attribute can still bend Internet path selection.
The Race Condition Hiding in the Flush
Cloudflare's six-week hunt through a truncated image response is a reminder that observability stops at the layer you forgot to instrument.
End of list