frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

RFC 9849. TLS Encrypted Client Hello

https://www.rfc-editor.org/rfc/rfc9849.html
36•P_qRs•1h ago

Comments

weitzj•51m ago
Will this have an impact on Loadbalancers? Like does one have to do client side load balancing like in gRPC?
j16sdiz•30m ago
The loadbalancer can force a downgrade .
grenran•13m ago
My understanding is that you can use split mode to only have the load balancer decrypt the server name section, and forward the actual session and key exchange down to the backend without doing double layer encryption.
ivanr•41m ago
I wrote about ECH a couple of months ago, when the specs were still in draft but already approved for publication. It's a short read, if you're not already familiar with ECH and its history: https://www.feistyduck.com/newsletter/issue_127_encrypted_cl...

In addition to the main RFC 9849, there is also RFC 9848 - "Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings": https://datatracker.ietf.org/doc/rfc9848/

There's an example of how it's used in the article.

fmajid•5m ago
Thanks for the writeup, Ivan, I am a great fan of your work!

Now we need to get Qualys to cap SSL Labs ratings at B for servers that don't support ECH. Also those that don't have HSTS and HSTS Preload while we're at it.

Show HN: GuardClaw – cryptographically verifiable execution logs for AI agents

https://github.com/viruswami5511/guardclaw
1•viruswami5511•2m ago•0 comments

A Day in the Life of an Enshittificator [video]

https://www.youtube.com/watch?v=T4Upf_B9RLQ
1•punnerud•4m ago•0 comments

What I Like About WCAG 3.0

https://afixt.com/what-i-like-about-wcag-3-0/
1•robin_reala•4m ago•0 comments

Sorry Dan, PMs Should Vibe Code

https://12gramsofcarbon.com/p/sorry-dan-pms-should-absolutely-vibe
1•theahura•6m ago•0 comments

Show HN: Sniffmail – Email verification API, one NPM install, catch fake-signups

https://sniffmail.io
1•dayoola•6m ago•0 comments

Ask HN: What do you think of Anthropic adding $10B of revenue in last 2 months?

1•aurareturn•6m ago•0 comments

What canceled my Go context?

https://rednafi.com/go/context-cancellation-cause/
1•mweibel•6m ago•0 comments

Show HN: CLInkedIn – CLI and web based job scanner for LinkedIn

https://github.com/colby-int/CLInkedin
1•colby-int•8m ago•0 comments

All Nitter instances cannot load list of multiple users at the same time

https://github.com/zedeus/nitter/issues/1373
1•Markoff•9m ago•0 comments

The Intel 486DX2 CPU

https://dfarq.homeip.net/intel-486dx2-cpu/
1•jnord•10m ago•0 comments

Evals Skills for Coding Agents

https://hamel.dev/blog/posts/evals-skills/
1•call-me-al•11m ago•0 comments

What I do, and what I delegate to AI

https://salah.louizy.com/blog/what-i-do-and-what-i-delegate-to-ai/
1•losalah•14m ago•0 comments

Show HN: EU AI Radar – 60-second self-check for EU AI Act exposure

https://euaiactnews.live/
1•reavid•15m ago•0 comments

The Gamer and the Nihilist: An analysis of Product Hunt, 2014 – 2021 (2022)

https://components.news/the-gamer-and-the-nihilist/
1•thinkingemote•17m ago•0 comments

AuroriaLink

https://github.com/Sebastien-VZN/auroria_link
1•SebSeb83•17m ago•0 comments

Show HN: Experimenting with perspective-based discussions (city,country,global)

1•civichalls•18m ago•0 comments

Consume fewer tokens and increase efficiency

https://edwardbx.com/articles/token-efficiency/
1•crassus_ed•19m ago•0 comments

Kickstarter's CEO stands by 4-day week remote team, sometimes backfires

https://fortune.com/2026/03/03/kickstarter-ceo-pros-cons-four-day-work-week-sometimes-backfires/
1•iancmceachern•20m ago•0 comments

Show HN: Move 37 – A strategy game inspired by AlphaGo's Move 37

https://www.movets.site/
1•MUISIK•21m ago•0 comments

Show HN: Retro – active context curator for coding agents

https://github.com/ImanHashemi/retro
2•imanhashemi•24m ago•0 comments

How OpenClaw Is Rebuilding the Claw Machine Industry with Software

https://clawsifyai.com/
1•V_Shukla•29m ago•1 comments

Show HN: Book Collage Creator

https://inktide.app/collage
1•sd9•30m ago•0 comments

How are we preparing for the Long Web?

https://brennan.day/how-are-we-preparing-for-the-long-web/
1•marbartolome•30m ago•0 comments

Oxyde ORM – a type-safe, Pydantic-centric asynchronous ORM with a Rust core

https://github.com/mr-fatalyst/oxyde
1•0x1997•32m ago•0 comments

The Dangerous Illusion of AI Coding? – Jeremy Howard

https://www.youtube.com/watch?v=dHBEQ-Ryo24
1•terrorbilly•39m ago•0 comments

Fooling Go's X.509 Certificate Verification

https://danielmangum.com/posts/fooling-go-x509-certificate-verification/
1•hasheddan•40m ago•0 comments

Show HN: Finance Sentiment CLI – Reddit/X/Polymarket sentiment from the terminal

https://adanos.org/finance-sentiment-cli
1•Adanos•40m ago•0 comments

Nuclear War: An LLM Scenario

https://chrisclapham.com/blog/nuclear-war-an-llm-scenario
2•huey77•44m ago•0 comments

Al Jazeera investigation: Iran girls' school targeting likely 'deliberate'

https://www.aljazeera.com/news/2026/3/3/questions-over-minab-girls-school-strike-as-israel-us-den...
1•zahirbmirza•47m ago•1 comments

AI Coding Startup Cursor Hits $2B Annual Sales Rate

https://www.bloomberg.com/news/articles/2026-03-02/cursor-recurring-revenue-doubles-in-three-mont...
1•arberavdullahu•47m ago•0 comments