OpenSSH Detached Signatures — sshsig, Namespaces and ssh-keygen -Y
How sshsig signs arbitrary files with an SSH key, why the namespace field prevents cross-protocol replay, and how allowed_signers controls verification.
2026, Aug 27 — 12 minute read
SFTP Request Pipelining in OpenSSH — Window Ramping, Negotiated Limits and scp
How the OpenSSH SFTP client keeps requests in flight, ramps its window from one to sixty-four, negotiates buffer sizes with the server and backs scp.
2026, Aug 27 — 13 minute read
OpenSSH Connection Multiplexing — ControlMaster, the Mux Protocol and Proxy Mode
How ControlMaster works in OpenSSH, the mux protocol spoken over the ControlPath socket, and the difference between passenger mode and proxy mode.
2026, Aug 27 — 13 minute read
The OpenSSH Channel Layer — One Abstraction Behind Forwarding, X11, Agent Access and Tunnels
How channels.c implements port forwarding, X11, SOCKS proxying, agent access and tunnels as one abstraction, with per-channel windows and half-close.
2026, Aug 27 — 12 minute read
OpenSSH Certificates — Critical Options, Extensions and the KRL Encoding
How an OpenSSH certificate is validated, why unknown critical options are fatal while unknown extensions are ignored, and how KRL revocation lists compress.
2026, Aug 27 — 13 minute read
Fluid on Solana — Porting a Liquidity Layer from the EVM to the SVM
Fluid's liquidity layer runs on Solana as Jupiter Lend. A read of its Anchor programs, from balance-delta deposits and tick PDAs to introspected flash loans.
2026, Aug 26 — 27 minute read
CIP-113 Programmable Tokens on Cardano
How CIP-113 puts issuer-enforced transfer rules on Cardano native assets with no hard fork. Shared custody address, sorted-list registry, seizure scope.
2026, Aug 26 — 34 minute read
