online
lostsh.github.io
rfc 3514: evil bit not set
Security: one domain, end to end
Yohann Vernhes
I own a security domain end to end: the standards other teams build against, the architecture reviews that decide whether they can ship, and the tooling underneath both. Most weeks that means moving between a threat model, a code review, and a room where the tradeoff has to hold up without jargon. I still write the tools myself; that part hasn't changed since the robots.
gpg
D3A7 DF5C D5AA FD5D 82A2 84BF 4B6B EA90 E9BC 26EA
key
rsa4096, created 2023-04-01
security.txt
rfc 9116