- [TLS] A new consensus call on ALPN vs NPN (was ALPN concerns) — A Mozilla engineer makes the case for recommending NPN over ALPN for TLS protocol negotiation. ALPN looks likely to win, but it performs negotiation in the clear instead of encrypted.
- FreeBSD Quarterly Status Report — The FreeBSD developers have expressed concern about possible compromises in certain hardware random number generators. [Ars Technica] [HN]
- The ChaCha Stream Cipher for Transport Layer Security — An Internet Draft proposal for using ChaCha in TLS.
- Cryptographers and engineers continue to battle it out in the IETF TLS working group.
- TextSecure, Now With 10 Million More Users — Open WhisperSystems announces their encrypted text messaging system will be integrated into CyanogenMod. [Ars Technica]
- WhisperPush: Secure Messaging Integration — CyanogenMod offers more details about the TextSecure integration.
- The New Yorker: The Mission to De-Centralize the Internet — The New Yorker reports on the decentralization efforts.
- Matthew Green promises a detailed update on the TrueCrypt audit next week.
- Electronic Frontier Foundation: Google Removes Vital Privacy Feature From Android, Claiming Its Release Was Accidental — The EFF laments the removal of a hidden feature allowing Android users fine-grain control over app permissions. (As an Android developer, I was never sure how this feature could work smoothly, so I’m not surprised that Google is disabling it for the time being.)
- Wired: With the New Gmail, People Will Know When You Open That Message