projects

All my projects can be found on my GitHub profile and on my GitHub Gist page.

debian

I am a Debian Developer, member of the Security and Multimedia teams, and maintainer of several packages.

as205323

I operate my own autonomous system (AS205323) for research and fun. Have a look at the network’s PeeringDB page for more info.

hello.ghedini.me

I’ve setup a little experiment with traceroute and reverse DNS. When tracing the hello.ghedini.me host (IPv6-only) a message will appear in the trace, like this:

$ mtr hello.ghedini.me
[...]
 12.|-- o----o----o----o----o----o----o----o----o  0.0%     1   80.0  80.0  80.0  80.0   0.0
 13.|-- hello.i.am.alessandro.ghedini              0.0%     1   85.2  85.2  85.2  85.2   0.0
 14.|-- i.am.an.open.source.developer.working.as   0.0%     1   80.0  80.0  80.0  80.0   0.0
 15.|-- systems.engineer.at.cloudflare             0.0%     1   80.0  80.0  80.0  80.0   0.0
 16.|-- feel.free.to.write.me.a.line.at            0.0%     1   85.1  85.1  85.1  85.1   0.0
 17.|-- alessandro.at.ghedini.dot.me               0.0%     1   85.1  85.1  85.1  85.1   0.0
 18.|-- my.gpg.key.is.0xafa51bd6cde573cb           0.0%     1   80.4  80.4  80.4  80.4   0.0
 19.|-- o----o----o----o----o----o----o----o----o  0.0%     1   80.0  80.0  80.0  80.0   0.0

ietf

I (co-)authored the following IETF documents:

• Using Early Data in DNS over TLS (draft-ietf-dprive-early-data)
• Deprecating MD5 and SHA-1 signature hashes in TLS 1.2 (draft-ietf-tls-md5-sha1-deprecate)
• TLS Certificate Compression (RFC8879)

I’ve also contributed to a few other documents, like:

• QUIC: A UDP-Based Multiplexed and Secure Transport (draft-ietf-quic-transport)
• Hypertext Transfer Protocol Version 3 (HTTP/3) (draft-ietf-quic-http)
• Using TLS to Secure QUIC (draft-ietf-quic-tls)
• QUIC Loss Detection and Congestion Control (draft-ietf-quic-recovery)
• QPACK: Header Compression for HTTP/3 (draft-ietf-quic-qpack)
• The Transport Layer Security (TLS) Protocol Version 1.3 (RFC8446)

cpan

I’ve written a few Perl modules that can be found on CPAN, though they are mostly unmaintained now.

contrib

Here’s a list of selected contributions to open source projects I’ve made. Most of my contributions are also tracked on OpenHub.net (but information there may be outdated):

• TCP Fast Open support for cURL: implemented support for the TCP Fast Open (RFC 7413) for cURL on Linux and OS X.
• New multi-threading API for OpenSSL: implemented a modern and multi-platform multi-threading API for use within OpenSSL and converted existing code to use it.
• HKDF support for OpenSSL: implemented support for the HMAC-based Extract-and-Expand Key Derivation Function (HKDF) (RFC 5869) for OpenSSL.
• TLS_FALLBACK_SCSV support for GnuTLS: implemented client and server side support the TLS fallback signaling cipher suite (RFC 7507) for GnuTLS.
• TLS False Start support for cURL implemented support for the False Start TLS handshake “mode” (RFC draft-bmoeller-tls-falsestart) for cURL’s NSS backend.
• OCSP stapling support for cURL: implemented support for the OCSP stapling (Certificate Status Request) TLS extension (RFC 6066, Section 8) for cURL’s OpenSSL, GnuTLS and NSS backends (and found 1 OpenSSL bug and 2 in GnuTLS in the process).
• Bauer stereo-to-binaural filter for FFmpeg: implemented the Bauer stereo to binaural audio filter for FFmpeg and Libav.
• ReplayGain support for FFmpeg: improved ReplayGain support for FFmpeg and Libav.
• VXLAN support for VDE: implemented the VXLAN (Virtual eXtensible LAN) protocol (RFC 7348) for the VDE (Virtual Distributed Ethernet) virtual networking framework.

↩