TLS 1.3 Lab Shows What Network Observers Can See Before Encryption Begins

·1 views

A hands-on Protocol Lab tutorial examines exactly which parts of a TLS 1.3 handshake remain visible to an on-path observer before encryption takes effect. Using OpenSSL tools inside a two-node container lab, participants capture a live TLS handshake and inspect its cleartext components. The ClientHello message — which carries the Server Name Indication (SNI) and Application-Layer Protocol Negotiation (ALPN) offer — is transmitted in plaintext and fully readable on the wire. The ServerHello, which confirms the chosen cipher suite and key share, is also unencrypted, but the server certificate is protected, unlike in TLS 1.2. The lab references RFC 8446 and related standards, and is designed to take between 55 and 70 minutes to complete.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

DocuChat offers lawyers a self-hosted, offline AI tool with verified citations

DocuChat is an open-source, locally hosted document chat application built specifically for legal professionals who need to query sensitive files without exposing them to third-party cloud services. The tool runs entirely on a lawyer's own machine using local AI models via Ollama, a FastAPI backend, and a LanceDB vector store, requiring no API keys from providers like OpenAI or Google. A key feature is its citation verification system, which checks whether any source quote proposed by the AI model actually appears in the retrieved document at the claimed location — dropping unverifiable claims rather than displaying them. The app supports contracts, deposition transcripts, pleadings, scanned PDFs, and discovery bundles, with matter-scoped retrieval to prevent data from one client file bleeding into another. The project is available on GitHub, where its developers are seeking community validation to continue development.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Pollux Launches Anonymous Real-Time Tracker for Nigerian Political Sentiment

A developer has built Pollux, an anonymous platform that lets users vote support, undecided, or oppose on 52 Nigerian politicians at national and state levels. The tool displays live vote tallies, regional breakdowns across Nigeria's six geopolitical zones, and AI-generated briefings on each politician. Users can leave short moderated comments, and a debate temperature gauge tracks the intensity of public opinion per politician. The platform withholds data when a politician has not yet reached a minimum sample size, rather than displaying unreliable figures. Built without user accounts or social metrics, Pollux aims to capture quieter public opinion beyond the noise of social media.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why a Folder of Docs Fails as an AI Agent Knowledge Base

Pointing an AI agent at a folder of markdown documents and running retrieval-augmented generation (RAG) over it is not a true knowledge base, according to a developer essay published on DEV Community. The core problem is that document chunks lack provenance and retrieve prose rather than discrete, verifiable facts, leading agents to produce fluent but unverifiable answers. The author argues the fix is a structured pipeline that converts source documents into atomic, sourced claims before any querying takes place. Each imported source should carry its origin metadata so an agent can cite a specific document or incident review rather than offering a generic response. The piece outlines a four-stage workflow using an open-source corpus CLI tool to scaffold, import, distill, and validate a queryable knowledge corpus.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Multi-Agent AI Systems Risk Runaway Spawning Without Strict Governance Controls

AI orchestration systems that allow agents to spawn sub-agents can spiral into uncontrolled, exponentially growing trees of processes — a pattern developers are comparing to the classic Unix fork bomb. Each spawned agent inherits the ability to create more agents, rapidly multiplying token costs and compute usage in ways that can become financially significant. Developers building such systems are advised to assign most agents as non-spawning 'leaf' roles, reserving orchestration privileges only for designated supervisors. Hard limits on tree depth, concurrent child agents, and cumulative cost ceilings are recommended as essential guardrails. Without these controls, multi-agent pipelines risk runaway execution rather than delivering the coordinated efficiency they promise.

0 comments Read more at DEV Community