projects

All my projects can be found on my GitHub profile and on my GitHub Gist page.

debian

I am a Debian Developer, member of the Security and Multimedia teams, and maintainer of several packages.

ietf

I (co-)authored the following IETF documents:

• TLS Certificate Compression (RFC8879)
• Deprecating MD5 and SHA-1 signature hashes in TLS 1.2 (draft-ietf-tls-md5-sha1-deprecate)
• Using Early Data in DNS over TLS (draft-ietf-dprive-early-data)

I’ve also contributed to a few other documents, like:

• The Transport Layer Security (TLS) Protocol Version 1.3 (RFC8446)
• QUIC: A UDP-Based Multiplexed and Secure Transport (RFC9000)
• Using TLS to Secure QUIC (RFC9001)
• QUIC Loss Detection and Congestion Control (RFC9002)
• Hypertext Transfer Protocol Version 3 (HTTP/3) (draft-ietf-quic-http)
• QPACK: Header Compression for HTTP/3 (draft-ietf-quic-qpack)

cpan

I’ve written a few Perl modules that can be found on CPAN, though they are mostly unmaintained now.

contrib

Here’s a list of selected contributions to open source projects I’ve made. Most of my contributions are also tracked on OpenHub.net (but information there may be outdated):

• TCP Fast Open support for cURL: implemented support for the TCP Fast Open (RFC 7413) for cURL on Linux and OS X.
• New multi-threading API for OpenSSL: implemented a modern and multi-platform multi-threading API for use within OpenSSL and converted existing code to use it.
• HKDF support for OpenSSL: implemented support for the HMAC-based Extract-and-Expand Key Derivation Function (HKDF) (RFC 5869) for OpenSSL.
• TLS_FALLBACK_SCSV support for GnuTLS: implemented client and server side support the TLS fallback signaling cipher suite (RFC 7507) for GnuTLS.
• TLS False Start support for cURL implemented support for the False Start TLS handshake “mode” (RFC draft-bmoeller-tls-falsestart) for cURL’s NSS backend.
• OCSP stapling support for cURL: implemented support for the OCSP stapling (Certificate Status Request) TLS extension (RFC 6066, Section 8) for cURL’s OpenSSL, GnuTLS and NSS backends (and found 1 OpenSSL bug and 2 in GnuTLS in the process).
• Bauer stereo-to-binaural filter for FFmpeg: implemented the Bauer stereo to binaural audio filter for FFmpeg and Libav.
• ReplayGain support for FFmpeg: improved ReplayGain support for FFmpeg and Libav.
• VXLAN support for VDE: implemented the VXLAN (Virtual eXtensible LAN) protocol (RFC 7348) for the VDE (Virtual Distributed Ethernet) virtual networking framework.

↩