What Colin Percival thinks about cybersecurity

@colin-percival · 8 positions · On ppll ↗

FreeBSD developer and former FreeBSD Security Officer; founder of the Tarsnap online backup service and author of the scrypt key derivation function.

Colin Percival did not write this page.

We collected these quotes from things they published elsewhere, and every quote links to where it was said. They have no account here and have not endorsed this site. Quotes are word for word; the short line under each one is our own restatement, not their wording. Their own site. Is this you? Claim it or ask us to remove it. Or tell us what is wrong here.

Filter cybersecurity · Newest first

Topic

All 8 design 3 AI agents 1 cryptography 1 cybersecurity 1 management 1 privacy 1 product management 1 software quality 1 the cloud 1

Sort

Newest Oldest

Only Colin Percival on cybersecurity. See everyone on cybersecurity

1 dated position, 2026, in their own words. Our reading of what Colin Percival has said — not written or endorsed by them.

1 position so far — this page is not yet offered to search engines.

11 Apr 2026

Our readingEnd-to-end cryptographic signing of requests and responses is more secure than relying on transport-layer encryption like TLS alone.

privacy cryptography

Their wordsWith requests going over TLS it is obviously less critical now, but end-to-end signing is always going to be better than transport-layer security.

↗20 Years on AWS and Never Not My Jobdaemonology.net 1st of 3 in this piece