corpus.blog
41554 blogs · [ { "id": "01a0821a-c42b-7078-a64f-9751456066b2", "title": "Soft-launching the DiffOS project", "url": "https://blog.josefsson.org/2026/09/04/soft-launching-the-diffos-project/", "published_at": "2026-09-04T13:11:41+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975145b0c17b", "title": "Backup of S3 Objects Using rsnapshot", "url": "https://blog.josefsson.org/2026/01/18/backup-of-s3-objects-using-rsnapshot/", "published_at": "2026-01-17T22:04:01+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975145b179c3", "title": "Debian Libre Live 13.3.0 is released!", "url": "https://blog.josefsson.org/2026/01/13/debian-libre-live-13-3-0-is-released/", "published_at": "2026-01-13T13:53:23+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751466225e2", "title": "Debian Taco – Towards a GitSecDevOps Debian", "url": "https://blog.josefsson.org/2026/01/09/debian-taco-towards-a-gitsecdevops-debian/", "published_at": "2026-01-09T16:33:05+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975146c78ca3", "title": "Reproducible Guix Container Images", "url": "https://blog.josefsson.org/2025/12/07/reproducible-guix-container-images/", "published_at": "2025-12-06T22:22:41+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751478c47cc", "title": "Guix on Trisquel & Ubuntu for Reproducible CI/CD Artifacts", "url": "https://blog.josefsson.org/2025/12/03/guix-on-trisquel-ubuntu-for-reproducible-ci-cd-artifacts/", "published_at": "2025-12-02T22:01:49+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975148175651", "title": "Container Images for Debian with Guix", "url": "https://blog.josefsson.org/2025/11/28/container-images-for-debian-with-guix/", "published_at": "2025-11-28T16:32:33+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975148d67117", "title": "Introducing the Debian Libre Live Images", "url": "https://blog.josefsson.org/2025/11/13/introducing-the-debian-libre-live-images/", "published_at": "2025-11-12T23:16:35+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975149087619", "title": "Independently Reproducible Git Bundles", "url": "https://blog.josefsson.org/2025/07/31/independently-reproducible-git-bundles/", "published_at": "2025-07-31T14:50:05+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97514956d8e6", "title": "Building Debian in a GitLab Pipeline", "url": "https://blog.josefsson.org/2025/04/30/building-debian-in-a-gitlab-pipeline/", "published_at": "2025-04-30T09:25:59+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97514a2cc1f7", "title": "GitLab Runner with Rootless Privilege-less Capability-less Podman on riscv64", "url": "https://blog.josefsson.org/2025/04/25/gitlab-runner-with-rootless-privilege-less-podman-on-riscv64/", "published_at": "2025-04-25T18:30:24+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97514b0b5d37", "title": "Verified Reproducible Tarballs", "url": "https://blog.josefsson.org/2025/04/17/verified-reproducible-tarballs/", "published_at": "2025-04-17T19:24:46+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97514b3d7e8a", "title": "On Binary Distribution Rebuilds", "url": "https://blog.josefsson.org/2025/03/31/on-binary-distribution-rebuilds/", "published_at": "2025-03-31T08:21:24+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97514c287044", "title": "Reproducible Software Releases", "url": "https://blog.josefsson.org/2025/03/24/reproducible-software-releases/", "published_at": "2025-03-24T11:09:10+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97514cf2ec9d", "title": "OpenSSH and Git on a Post-Quantum SPHINCS+", "url": "https://blog.josefsson.org/2024/12/23/openssh-and-git-on-a-post-quantum-sphincs/", "published_at": "2024-12-23T00:44:02+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97514d695c08", "title": "Guix Container Images for GitLab CI/CD", "url": "https://blog.josefsson.org/2024/12/18/guix-container-images-for-gitlab-ci-cd/", "published_at": "2024-12-18T18:43:38+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97514da1e61a", "title": "Towards Idempotent Rebuilds?", "url": "https://blog.josefsson.org/2024/07/10/towards-idempotent-rebuilds/", "published_at": "2024-07-09T22:16:16+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97514e65732c", "title": "Reproducible and minimal source-only tarballs", "url": "https://blog.josefsson.org/2024/04/13/reproducible-and-minimal-source-only-tarballs/", "published_at": "2024-04-13T16:44:27+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97514efeb6e4", "title": "Towards reproducible minimal source code tarballs? On *-src.tar.gz", "url": "https://blog.josefsson.org/2024/04/01/towards-reproducible-minimal-source-code-tarballs-please-welcome-src-tar-gz/", "published_at": "2024-04-01T10:28:17+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97514fbdc935", "title": "Apt archive mirrors in Git-LFS", "url": "https://blog.josefsson.org/2024/03/18/apt-archive-mirrors-in-git-lfs/", "published_at": "2024-03-18T16:15:49+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97515003a4db", "title": "Trisquel on arm64: Ampere Altra", "url": "https://blog.josefsson.org/2024/01/10/trisquel-on-arm64-ampere-altra/", "published_at": "2024-01-10T09:26:24+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975150d99059", "title": "Validating debian/copyright: licenserecon", "url": "https://blog.josefsson.org/2023/12/29/validating-debian-copyright-licenserecon/", "published_at": "2023-12-28T23:17:28+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975151c53a9e", "title": "Classic McEliece goes to IETF and OpenSSH", "url": "https://blog.josefsson.org/2023/12/10/classic-mceliece-goes-to-ietf-and-openssh/", "published_at": "2023-12-09T23:11:22+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975151db0e9b", "title": "Trisquel on ppc64el: Talos II", "url": "https://blog.josefsson.org/2023/09/01/trisquel-on-ppc64el-talos-ii/", "published_at": "2023-09-01T15:37:18+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975151dc69ff", "title": "Enforcing wrap-and-sort -satb", "url": "https://blog.josefsson.org/2023/08/16/enforcing-wrap-and-sort-satb/", "published_at": "2023-08-16T09:00:32+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97515265e9a3", "title": "Coping with non-free software in Debian", "url": "https://blog.josefsson.org/2023/07/11/coping-with-non-free-debian/", "published_at": "2023-07-11T13:27:00+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975152b464af", "title": "Streamlined NTRU Prime sntrup761 goes to IETF", "url": "https://blog.josefsson.org/2023/05/12/streamlined-ntru-prime-sntrup761-goes-to-ietf/", "published_at": "2023-05-11T22:03:52+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975152c7f2d0", "title": "How To Trust A Machine", "url": "https://blog.josefsson.org/2023/04/29/how-to-trust-a-machine/", "published_at": "2023-04-29T11:45:42+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751538315ff", "title": "A Security Device Threat Model: The Substitution Attack", "url": "https://blog.josefsson.org/2023/04/27/a-security-device-threat-model-the-substitution-attack/", "published_at": "2023-04-27T16:30:20+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751539e42d2", "title": "Sigstore for Apt Archives: apt-cosign", "url": "https://blog.josefsson.org/2023/04/20/sigstore-for-apt-archives-apt-cosign/", "published_at": "2023-04-20T17:04:03+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751547bfe28", "title": "More on Differential Reproducible Builds: Devuan is 46% reproducible!", "url": "https://blog.josefsson.org/2023/04/17/more-on-differential-reproducible-builds-devuan-is-46-reproducible/", "published_at": "2023-04-17T15:29:26+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975155123ae4", "title": "Sigstore protects Apt archives: apt-verify & apt-sigstore", "url": "https://blog.josefsson.org/2023/04/15/sigstore-protects-apt-archives-apt-verify-apt-sigstore/", "published_at": "2023-04-15T08:33:41+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751551ef72f", "title": "Trisquel is 42% Reproducible!", "url": "https://blog.josefsson.org/2023/04/10/trisquel-is-42-reproducible/", "published_at": "2023-04-10T17:36:18+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97515563789b", "title": "OpenPGP master key on Nitrokey Start", "url": "https://blog.josefsson.org/2023/03/27/openpgp-master-key-on-nitrokey-start/", "published_at": "2023-03-27T14:57:05+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751560cb5a1", "title": "Apt Archive Transparency: debdistdiff & apt-canary", "url": "https://blog.josefsson.org/2023/02/01/apt-archive-transparency-debdistdiff-apt-canary/", "published_at": "2023-02-01T20:56:24+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751561e680f", "title": "Understanding Trisquel", "url": "https://blog.josefsson.org/2023/01/22/understanding-trisquel/", "published_at": "2023-01-22T11:10:53+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975156c1e38d", "title": "Preseeding Trisquel Virtual Machines Using “netinst” Images", "url": "https://blog.josefsson.org/2022/12/30/preseeding-trisquel-virtual-machines-using-netinst-images/", "published_at": "2022-12-30T00:24:18+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975157bf5d29", "title": "OpenPGP key on FST-01SZ", "url": "https://blog.josefsson.org/2022/12/24/openpgp-key-on-fst-01sz/", "published_at": "2022-12-24T13:36:51+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975158257fee", "title": "Second impressions of Guix 1.4", "url": "https://blog.josefsson.org/2022/12/19/second-impressions-of-guix-1-4/", "published_at": "2022-12-19T21:38:32+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975158f2a520", "title": "Guix 1.4 on NV41PZ", "url": "https://blog.josefsson.org/2022/12/16/guix-1-4-on-nv41pz/", "published_at": "2022-12-16T11:09:46+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975159cdaaae", "title": "Trisquel 11 on NV41PZ: First impressions", "url": "https://blog.josefsson.org/2022/12/10/trisquel-11-on-nv41pz-first-impressions/", "published_at": "2022-12-10T19:47:49+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97515a87a5ec", "title": "How to complicate buying a laptop", "url": "https://blog.josefsson.org/2022/12/10/how-to-complicate-buying-a-laptop/", "published_at": "2022-12-10T11:26:01+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97515b28dc2c", "title": "On language bindings & Relaunching Guile-GnuTLS", "url": "https://blog.josefsson.org/2022/10/14/on-language-bindings-relaunching-guile-gnutls/", "published_at": "2022-10-14T13:58:43+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97515bdb1018", "title": "Privilege separation of GSS-API credentials for Apache", "url": "https://blog.josefsson.org/2022/09/20/privilege-separation-of-gss-api-credentials-for-apache/", "published_at": "2022-09-20T06:40:05+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97515cbe0b24", "title": "Static network config with Debian Cloud images", "url": "https://blog.josefsson.org/2022/08/22/static-network-config-with-debian-cloud-images/", "published_at": "2022-08-22T10:09:41+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97515d6d940e", "title": "Towards pluggable GSS-API modules", "url": "https://blog.josefsson.org/2022/07/14/towards-pluggable-gss-api-modules/", "published_at": "2022-07-14T09:28:19+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97515dc4479c", "title": "What’s wrong with SCRAM?", "url": "https://blog.josefsson.org/2021/06/08/whats-wrong-with-scram/", "published_at": "2021-06-08T18:55:22+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97515eab1904", "title": "OpenPGP smartcard with GNOME on Debian 11 Bullseye", "url": "https://blog.josefsson.org/2021/05/01/openpgp-smartcard-with-gnome-on-debian-11-bullseye/", "published_at": "2021-05-01T14:21:46+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97515f73512c", "title": "Passive Icinga Checks: icinga-pusher", "url": "https://blog.josefsson.org/2019/12/16/passive-icinga-checks-icinga-pusher/", "published_at": "2019-12-16T19:19:56+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97515f8bb55e", "title": "OpenPGP smartcard under GNOME on Debian 10 Buster", "url": "https://blog.josefsson.org/2019/06/21/openpgp-smartcard-under-gnome-on-debian-10-buster/", "published_at": "2019-06-21T18:09:34+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975160105da5", "title": "Offline Ed25519 OpenPGP key with subkeys on FST-01G running Gnuk", "url": "https://blog.josefsson.org/2019/03/21/offline-ed25519-openpgp-key-with-subkeys-on-fst-01g-running-gnuk/", "published_at": "2019-03-21T20:45:01+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975160f31d41", "title": "Installing Gnuk on FST-01G running NeuG", "url": "https://blog.josefsson.org/2019/03/21/installing-gnuk-on-fst-01g-running-neug/", "published_at": "2019-03-21T20:39:04+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975161b112c5", "title": "OpenPGP 2019 Key Transition Statement", "url": "https://blog.josefsson.org/2019/03/21/openpgp-2019-key-transition-statement/", "published_at": "2019-03-21T20:30:20+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975162119977", "title": "Planning for a new OpenPGP key", "url": "https://blog.josefsson.org/2019/03/21/planning-for-a-new-openpgp-key/", "published_at": "2019-03-20T23:05:30+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751622dc0f4", "title": "Vikings D16 server first impressions", "url": "https://blog.josefsson.org/2017/08/03/vikings-d16-server-first-impressions/", "published_at": "2017-08-03T05:45:57+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975162a5950d", "title": "OpenPGP smartcard under GNOME on Debian 9.0 Stretch", "url": "https://blog.josefsson.org/2017/06/19/openpgp-smartcard-under-gnome-on-debian-9-0-stretch/", "published_at": "2017-06-18T22:42:19+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975162df31ff", "title": "GPS on Replicant 6", "url": "https://blog.josefsson.org/2017/03/04/gps-on-replicant-6/", "published_at": "2017-03-04T17:08:43+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97516301fff1", "title": "Why I don’t Use 2048 or 4096 RSA Key Sizes", "url": "https://blog.josefsson.org/2016/11/03/why-i-dont-use-2048-or-4096-rsa-key-sizes/", "published_at": "2016-11-03T20:32:22+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751631553dc", "title": "Let’s Encrypt Clients", "url": "https://blog.josefsson.org/2015/12/17/lets-encrypt-clients/", "published_at": "2015-12-17T09:25:44+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751634d9a1e", "title": "Automatic Replicant Backup over USB using rsync", "url": "https://blog.josefsson.org/2015/11/28/automatic-android-replicant-backup-over-usb-using-rsync/", "published_at": "2015-11-27T23:33:02+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975163f9f2b0", "title": "Combining Dnsmasq and Unbound", "url": "https://blog.josefsson.org/2015/10/26/combining-dnsmasq-and-unbound/", "published_at": "2015-10-26T10:52:35+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751641656df", "title": "Cosmos – A Simple Configuration Management System", "url": "https://blog.josefsson.org/2015/09/24/cosmos-simple-configuration-management-system/", "published_at": "2015-09-23T22:38:35+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975164878afe", "title": "SSH Host Certificates with YubiKey NEO", "url": "https://blog.josefsson.org/2015/06/16/ssh-host-certificates-with-yubikey-neo/", "published_at": "2015-06-16T12:05:46+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751648d30da", "title": "Scrypt in IETF", "url": "https://blog.josefsson.org/2015/05/19/scrypt-in-ietf/", "published_at": "2015-05-19T12:55:18+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975165103f48", "title": "Certificates for XMPP/Jabber", "url": "https://blog.josefsson.org/2015/05/12/certificates-for-xmpp-jabber/", "published_at": "2015-05-12T13:43:08+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97516604b352", "title": "Laptop decision fatigue", "url": "https://blog.josefsson.org/2015/05/11/laptop-decision-fatigue/", "published_at": "2015-05-11T19:31:45+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975166aaba88", "title": "Laptop indecision", "url": "https://blog.josefsson.org/2015/03/25/laptop-indecision/", "published_at": "2015-03-24T22:11:30+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975167090b94", "title": "EdDSA and Ed25519 goes to IETF", "url": "https://blog.josefsson.org/2015/03/04/eddsa-and-ed25519-goes-to-ietf/", "published_at": "2015-03-04T14:30:16+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751674617c3", "title": "Laptop Buying Advice?", "url": "https://blog.josefsson.org/2015/02/24/laptop-buying-advice/", "published_at": "2015-02-23T22:49:21+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751680b6f3c", "title": "Replicant 4.2 0003 on I9300", "url": "https://blog.josefsson.org/2015/01/14/replicant-4-2-0003-on-i9300/", "published_at": "2015-01-13T23:17:28+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97516892fa6a", "title": "OpenPGP Smartcards and GNOME", "url": "https://blog.josefsson.org/2015/01/02/openpgp-smartcards-and-gnome/", "published_at": "2015-01-02T20:46:40+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97516964fc91", "title": "Dice Random Numbers", "url": "https://blog.josefsson.org/2014/11/12/dice-random-numbers/", "published_at": "2014-11-11T23:36:02+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97516a21d23c", "title": "The Case for Short OpenPGP Key Validity Periods", "url": "https://blog.josefsson.org/2014/08/26/the-case-for-short-openpgp-key-validity-periods/", "published_at": "2014-08-26T18:11:27+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97516abf1263", "title": "Wifi on S3 with Replicant", "url": "https://blog.josefsson.org/2014/08/10/wifi-on-s3-with-replicant/", "published_at": "2014-08-10T18:02:37+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97516b467bd6", "title": "Replicant 4.2 0002 and NFC on I9300", "url": "https://blog.josefsson.org/2014/08/05/replicant-4-2-0002-and-nfc-on-i9300/", "published_at": "2014-08-05T12:20:18+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97516b84c571", "title": "Offline GnuPG Master Key and Subkeys on YubiKey NEO Smartcard", "url": "https://blog.josefsson.org/2014/06/23/offline-gnupg-master-key-and-subkeys-on-yubikey-neo-smartcard/", "published_at": "2014-06-23T11:18:38+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97516bc2fd6e", "title": "OpenPGP Key Transition Statement", "url": "https://blog.josefsson.org/2014/06/23/openpgp-key-transition-statement/", "published_at": "2014-06-22T22:29:32+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97516c8d8ffb", "title": "Creating a small JPEG photo for your OpenPGP key", "url": "https://blog.josefsson.org/2014/06/19/creating-a-small-jpeg-photo-for-your-openpgp-key/", "published_at": "2014-06-19T11:55:24+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97516d5c92a3", "title": "Replicant 4.2 on Samsung S3", "url": "https://blog.josefsson.org/2014/02/27/replicant-4-2-on-samsung-s3/", "published_at": "2014-02-27T11:07:45+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97516e0a46f1", "title": "Necrotizing Fasciitis", "url": "https://blog.josefsson.org/2014/01/05/necrotizing-fasciitis/", "published_at": "2014-01-04T22:44:49+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97516ec973c3", "title": "Replicant 4.0 on Samsung Galaxy S III", "url": "https://blog.josefsson.org/2013/11/11/using-replicant-on-samsung-s3/", "published_at": "2013-11-11T21:10:29+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97516fa8441e", "title": "BLURB: Software repository metadata convention", "url": "https://blog.josefsson.org/2013/09/24/blurb/", "published_at": "2013-09-24T21:03:45+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751703098c3", "title": "Portable Symmetric Key Container (PSKC) Library", "url": "https://blog.josefsson.org/2012/10/11/portable-symmetric-key-container-pskc-library/", "published_at": "2012-10-11T20:32:10+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975170e65fb4", "title": "Using OATH Toolkit with Dropbox", "url": "https://blog.josefsson.org/2012/08/27/using-oath-toolkit-with-dropbox/", "published_at": "2012-08-27T21:42:08+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751713e758c", "title": "Small syslog server", "url": "https://blog.josefsson.org/2011/12/12/small-syslog-server/", "published_at": "2011-12-12T11:19:45+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751721abfea", "title": "Unattended SSH with Smartcard", "url": "https://blog.josefsson.org/2011/10/11/unattended-ssh-with-smartcard/", "published_at": "2011-10-11T09:34:41+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975172a25d8b", "title": "OpenWRT with Huawei E367 and TP-Link TL-WR1043ND", "url": "https://blog.josefsson.org/2011/05/22/openwrt-with-huawei-e367-and-tp-link-tl-wr1043nd/", "published_at": "2011-05-22T07:25:56+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751733f72ec", "title": "Introducing the OATH Toolkit", "url": "https://blog.josefsson.org/2011/01/20/introducing-the-oath-toolkit/", "published_at": "2011-01-20T16:09:37+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975173408993", "title": "On Password Hashing and RFC 6070", "url": "https://blog.josefsson.org/2011/01/07/on-password-hashing-and-rfc-6070/", "published_at": "2011-01-07T12:55:05+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975173da942c", "title": "GNU SASL with SCRAM-SHA-1-PLUS", "url": "https://blog.josefsson.org/2010/11/17/gnu-sasl-with-scram-sha-1-plus/", "published_at": "2010-11-16T23:24:48+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751749d589a", "title": "Debian on Lenovo X201", "url": "https://blog.josefsson.org/2010/10/25/debian-on-lenovo-x201/", "published_at": "2010-10-25T22:39:54+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751756b13cf", "title": "GS2-KRB5 using GNU SASL and MIT Kerberos for Windows", "url": "https://blog.josefsson.org/2010/09/27/gs2-krb5-using-gnu-sasl-and-mit-kerberos-for-windows/", "published_at": "2010-09-27T12:14:58+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975175bc03c6", "title": "Bridging SASL and GSS-API: GS2", "url": "https://blog.josefsson.org/2010/07/13/bridging-sasl-and-gss-api-gs2/", "published_at": "2010-07-13T13:58:33+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751767d48ac", "title": "OpenWRT 10.03 “Backfire”", "url": "https://blog.josefsson.org/2010/05/03/openwrt-1003-backfire/", "published_at": "2010-05-03T10:08:15+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751771cfb27", "title": "GS2-KRB5 in GNU SASL 1.5.0", "url": "https://blog.josefsson.org/2010/03/31/gs2-krb5-in-gnu-sasl-150/", "published_at": "2010-03-30T23:10:22+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751775a8e3f", "title": "Fellowship interview", "url": "https://blog.josefsson.org/2010/01/08/fellowship-interview/", "published_at": "2010-01-08T14:01:18+00:00" }, { "id": "01a0821a-c42b-7078-a64f-9751779d983f", "title": "Nordic Free Software Award 2009", "url": "https://blog.josefsson.org/2009/11/15/nordic-free-software-award-2009/", "published_at": "2009-11-15T15:13:05+00:00" }, { "id": "01a0821a-c42b-7078-a64f-97517815cd49", "title": "Storing OpenPGP keys in the DNS", "url": "https://blog.josefsson.org/2009/10/29/storing-openpgp-keys-in-the-dns/", "published_at": "2009-10-29T08:33:55+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975178412ce4", "title": "Thread Safe Functions", "url": "https://blog.josefsson.org/2009/06/23/thread-safe-functions/", "published_at": "2009-06-23T20:17:02+00:00" }, { "id": "01a0821a-c42b-7078-a64f-975178b4591d", "title": "CACert and GnuTLS", "url": "https://blog.josefsson.org/2009/04/16/cacert-and-gnutls/", "published_at": "2009-04-16T15:51:02+00:00" } ] posts Claim your blog
Back to Simon Josefsson's blog
Blog · corpus.blog/blogs/blog.josefsson.org/posts

Simon Josefsson's blog

blog.josefsson.org

2026

Soft-launching the DiffOS projectoriginal ↗
4 Sept 2026
Backup of S3 Objects Using rsnapshotoriginal ↗
17 Jan 2026
Debian Libre Live 13.3.0 is released!original ↗
13 Jan 2026
Debian Taco – Towards a GitSecDevOps Debianoriginal ↗
9 Jan 2026

2025

Reproducible Guix Container Imagesoriginal ↗
6 Dec 2025
Guix on Trisquel & Ubuntu for Reproducible CI/CD Artifactsoriginal ↗
2 Dec 2025
Container Images for Debian with Guixoriginal ↗
28 Nov 2025
Introducing the Debian Libre Live Imagesoriginal ↗
12 Nov 2025
Independently Reproducible Git Bundlesoriginal ↗
31 Jul 2025
Building Debian in a GitLab Pipelineoriginal ↗
30 Apr 2025
GitLab Runner with Rootless Privilege-less Capability-less Podman on riscv64original ↗
25 Apr 2025
Verified Reproducible Tarballsoriginal ↗
17 Apr 2025
On Binary Distribution Rebuildsoriginal ↗
31 Mar 2025
Reproducible Software Releasesoriginal ↗
24 Mar 2025

2024

OpenSSH and Git on a Post-Quantum SPHINCS+original ↗
23 Dec 2024
Guix Container Images for GitLab CI/CDoriginal ↗
18 Dec 2024
Towards Idempotent Rebuilds?original ↗
9 Jul 2024
Reproducible and minimal source-only tarballsoriginal ↗
13 Apr 2024
Towards reproducible minimal source code tarballs? On *-src.tar.gzoriginal ↗
1 Apr 2024
Apt archive mirrors in Git-LFSoriginal ↗
18 Mar 2024
Trisquel on arm64: Ampere Altraoriginal ↗
10 Jan 2024

2023

Validating debian/copyright: licensereconoriginal ↗
28 Dec 2023
Classic McEliece goes to IETF and OpenSSHoriginal ↗
9 Dec 2023
Trisquel on ppc64el: Talos IIoriginal ↗
1 Sept 2023
Enforcing wrap-and-sort -satboriginal ↗
16 Aug 2023
Coping with non-free software in Debianoriginal ↗
11 Jul 2023
Streamlined NTRU Prime sntrup761 goes to IETForiginal ↗
11 May 2023
How To Trust A Machineoriginal ↗
29 Apr 2023
A Security Device Threat Model: The Substitution Attackoriginal ↗
27 Apr 2023
Sigstore for Apt Archives: apt-cosignoriginal ↗
20 Apr 2023
More on Differential Reproducible Builds: Devuan is 46% reproducible!original ↗
17 Apr 2023
Sigstore protects Apt archives: apt-verify & apt-sigstoreoriginal ↗
15 Apr 2023
Trisquel is 42% Reproducible!original ↗
10 Apr 2023
OpenPGP master key on Nitrokey Startoriginal ↗
27 Mar 2023
Apt Archive Transparency: debdistdiff & apt-canaryoriginal ↗
1 Feb 2023
Understanding Trisqueloriginal ↗
22 Jan 2023

2022

Preseeding Trisquel Virtual Machines Using “netinst” Imagesoriginal ↗
30 Dec 2022
OpenPGP key on FST-01SZoriginal ↗
24 Dec 2022
Second impressions of Guix 1.4original ↗
19 Dec 2022
Guix 1.4 on NV41PZoriginal ↗
16 Dec 2022
Trisquel 11 on NV41PZ: First impressionsoriginal ↗
10 Dec 2022
How to complicate buying a laptoporiginal ↗
10 Dec 2022
On language bindings & Relaunching Guile-GnuTLSoriginal ↗
14 Oct 2022
Privilege separation of GSS-API credentials for Apacheoriginal ↗
20 Sept 2022
Static network config with Debian Cloud imagesoriginal ↗
22 Aug 2022
Towards pluggable GSS-API modulesoriginal ↗
14 Jul 2022

2021

What’s wrong with SCRAM?original ↗
8 Jun 2021
OpenPGP smartcard with GNOME on Debian 11 Bullseyeoriginal ↗
1 May 2021

2019

Passive Icinga Checks: icinga-pusheroriginal ↗
16 Dec 2019
OpenPGP smartcard under GNOME on Debian 10 Busteroriginal ↗
21 Jun 2019
Offline Ed25519 OpenPGP key with subkeys on FST-01G running Gnukoriginal ↗
21 Mar 2019
Installing Gnuk on FST-01G running NeuGoriginal ↗
21 Mar 2019
OpenPGP 2019 Key Transition Statementoriginal ↗
21 Mar 2019
Planning for a new OpenPGP keyoriginal ↗
20 Mar 2019

2017

Vikings D16 server first impressionsoriginal ↗
3 Aug 2017
OpenPGP smartcard under GNOME on Debian 9.0 Stretchoriginal ↗
18 Jun 2017
GPS on Replicant 6original ↗
4 Mar 2017

2016

Why I don’t Use 2048 or 4096 RSA Key Sizesoriginal ↗
3 Nov 2016

2015

Let’s Encrypt Clientsoriginal ↗
17 Dec 2015
Automatic Replicant Backup over USB using rsyncoriginal ↗
27 Nov 2015
Combining Dnsmasq and Unboundoriginal ↗
26 Oct 2015
Cosmos – A Simple Configuration Management Systemoriginal ↗
23 Sept 2015
SSH Host Certificates with YubiKey NEOoriginal ↗
16 Jun 2015
Scrypt in IETForiginal ↗
19 May 2015
Certificates for XMPP/Jabberoriginal ↗
12 May 2015
Laptop decision fatigueoriginal ↗
11 May 2015
Laptop indecisionoriginal ↗
24 Mar 2015
EdDSA and Ed25519 goes to IETForiginal ↗
4 Mar 2015
Laptop Buying Advice?original ↗
23 Feb 2015
Replicant 4.2 0003 on I9300original ↗
13 Jan 2015
OpenPGP Smartcards and GNOMEoriginal ↗
2 Jan 2015

2014

Dice Random Numbersoriginal ↗
11 Nov 2014
The Case for Short OpenPGP Key Validity Periodsoriginal ↗
26 Aug 2014
Wifi on S3 with Replicantoriginal ↗
10 Aug 2014
Replicant 4.2 0002 and NFC on I9300original ↗
5 Aug 2014
Offline GnuPG Master Key and Subkeys on YubiKey NEO Smartcardoriginal ↗
23 Jun 2014
OpenPGP Key Transition Statementoriginal ↗
22 Jun 2014
Creating a small JPEG photo for your OpenPGP keyoriginal ↗
19 Jun 2014
Replicant 4.2 on Samsung S3original ↗
27 Feb 2014
Necrotizing Fasciitisoriginal ↗
4 Jan 2014

2013

Replicant 4.0 on Samsung Galaxy S IIIoriginal ↗
11 Nov 2013
BLURB: Software repository metadata conventionoriginal ↗
24 Sept 2013

2012

Portable Symmetric Key Container (PSKC) Libraryoriginal ↗
11 Oct 2012
Using OATH Toolkit with Dropboxoriginal ↗
27 Aug 2012

2011

Small syslog serveroriginal ↗
12 Dec 2011
Unattended SSH with Smartcardoriginal ↗
11 Oct 2011
OpenWRT with Huawei E367 and TP-Link TL-WR1043NDoriginal ↗
22 May 2011
Introducing the OATH Toolkitoriginal ↗
20 Jan 2011
On Password Hashing and RFC 6070original ↗
7 Jan 2011

2010

GNU SASL with SCRAM-SHA-1-PLUSoriginal ↗
16 Nov 2010
Debian on Lenovo X201original ↗
25 Oct 2010
GS2-KRB5 using GNU SASL and MIT Kerberos for Windowsoriginal ↗
27 Sept 2010
Bridging SASL and GSS-API: GS2original ↗
13 Jul 2010
OpenWRT 10.03 “Backfire”original ↗
3 May 2010
GS2-KRB5 in GNU SASL 1.5.0original ↗
30 Mar 2010
Fellowship intervieworiginal ↗
8 Jan 2010

2009

Nordic Free Software Award 2009original ↗
15 Nov 2009
Storing OpenPGP keys in the DNSoriginal ↗
29 Oct 2009
Thread Safe Functionsoriginal ↗
23 Jun 2009
CACert and GnuTLSoriginal ↗
16 Apr 2009
Next