Analysis · Security
An AI extension that reads your open tabs does it through one of three Chrome scopes. Here is what each one exposes, when it triggers a warning, and how to audit it before installing.
Analysis · Security
Key exchange got the headlines. Now Chrome and Windows must move certificates to ML-DSA, and every signature is a kilobyte-plus payload. Here is why the trust chain is the hard part.
Analysis · Security
Your browser may already use quantum-resistant key exchange. Here is how hybrid X25519 and ML-KEM rolled out across Chrome, Cloudflare, and OpenSSH, and what broke along the way.