Meshtastic: a node is its key
Dismissed as hikers with walkie-talkies. Read the 2.8 release notes as an identity architecture instead: node IDs derived from public keys, packets signed and no registry to ask because there's nothing there to ask.
cryptography
Post-quantum: key exchange was the easy half
Hybrid key exchange is largely deployed; certificates and signatures are nowhere near. The real bottleneck is crypto-agility, because anything that hard-codes an algorithm or needs a firmware update can't pivot in time.
The crypto wars never ended, they just got quieter
The UK has the power to issue a technical capability notice under the Investigatory Powers Act. Apple withdrew Advanced Data Protection for UK users rather than weaken it. Almost everything else about the case is secret, including whether the notice exists.
WireGuard: small enough to read
WireGuard shipped in Linux 5.6 at roughly 4,000 lines, against OpenVPN's hundred thousand and more. The size is the security argument; it isn't a happy side effect of one.
