PKI & Certificates
The piece argues that NIST ML-KEM now allows storing private keys as 64-byte seeds, which are smaller and always valid, avoiding the complexity of validating expanded decapsulation keys. It discusses memory versus on-wire representations, interoperability risks of supporting both seed and expanded formats, and practical guidance to favor seeds while postponing expanded formats. It also notes recent OID registrations and guidance for implementation choices.
Storage
A practical, GUI-free guide to building a minimal ZFS-based NAS on Debian. It covers hardware and software decisions, creating a RAIDZ1 zpool with ashift=12, setting up ZFS datasets, and sharing via Samba for documents and Time Machine backups, with notes on OpenZFS portability across hosts.