7ASecurity Completes Security Audit of Node Version Manager

7ASecurity had the privilege to collaborate with the Open Source Technology Improvement Fund (OSTIF), as well as the Node Version Manager (nvm) team, in a recent security audit of the nvm project. What is Node Version Manager? nvm is an open-source version manager for Node.js. It is designed to be secure, reliable and easy to use.nvm operates as …

DEfO-2 OpenSSL HPKE PR Security Audit

DEfO is developing an implementation of the Encrypted ClientHello (ECH) mechanism for OpenSSL. This effectively closes a privacy loophole in the Transport Layer Security protocol. Project Overview The DEfO project is developing an implementation of the encrypted ClientHello (ECH) mechanism for OpenSSL, which is a widely used library that provides an implementation of the Transport …