TLS

An OpenSSL vulnerability named HollowByte allows 11-byte TLS requests to allocate up to 131 KB of server memory that remains reserved until the process restarts. Okta's Red Team discovered and reported the denial-of-service bug, which was patched in June without a CVE identifier, security advisory, or changelog entry.

Microsoft will start blocking legacy TLS connections for POP and IMAP email clients in Exchange Online from July 2026, as part of its efforts to enhance security and modernize protocols.

Rail is a self-hosting programming language designed to implement TLS (Transport Layer Security) protocols independently. Developed by GitHub user zemo-g, it aims to provide a minimalistic, secure, and open-source solution for TLS communication. The project has minimal community engagement, with only 3 comments and 5 points on Hacker News.