Filippo Valsorda

We are all on the same page about the birthday bound of random nonces. However what I think you are overlooking is the 2^{-5} to 2^{-10} probability (to be insanely...

Also consider that TLS is a very best case for keeping counter nonces, with its sequential packets and session-bound keys. But as you say people will use this code to...

👋 hi! Do you think you'll have time for this before the end of the month? If you'd like, I can look into contributing the change!

Relatedly, interrupting a run also leaves behind a git worktree. It would be nice if the signal was caught and a cleanup step run anyway.

That exception exists specifically for Go. https://lwn.net/Articles/806863/

Folks, please keep it on-topic. This is not the forum to debate the decisions and security of the OpenBSD project, but only Go's compatibility with current and upcoming OpenBSD versions....

Ah, yeah, functions with an error return value should definitely return an error, not panic. I'll do a pass of all the marshal-side paths, and see if there are other...

@FnuGk no, we've got it, thank you for the report! https://go.dev/cl/422298 is a slightly broader fix that is now under review.

It looks like it should be possible to implement this with the [system certutil](https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/certutil). If someone with a Windows box could contribute that it would be great. In the meantime,...

> Note: At this time installers must either be MSIX, MSI or .exe application installers. Standalone or portable executables, compressed .zip files, and fonts are not currently supported. I would...