NGINX Community Blog

Category: Security

  • Encrypted Client Hello Comes to NGINX

    Encrypted Client Hello Comes to NGINX

    —

    by

    Roman Arutyunyan
    in

    Encrypted Client Hello (ECH) support in NGINX open source was contributed by Stephen Farrell, Computer Science Research Fellow, Trinity College Dublin (GitHub PR #840). This work was funded by the Open Technology Fund as part of the DEfO (Developing ECH for OpenSSL) project, which develops privacy-enhancing ECH implementations for OpenSSL and various web servers to…

  • Post-Quantum Cryptography (PQC) support in NGINX 

    Post-Quantum Cryptography (PQC) support in NGINX 

    —

    by

    Christopher van de Sande
    in

    TL; DR: Not all Linux distros can run NGINX with PQC support. Read this article to learn which ones do, and how to do it yourself. At DEF CON 33, Konstantinos Karagiannis argued that usable quantum capabilities could arrive much sooner than many expect. Regardless of the exact date, agencies such as NIST, NSA, and…