quic

CVE-2026-42530 discloses a use-after-free vulnerability in nginx's HTTP/3 QUIC module.

savearoundtrip is a tool that checks if a domain publishes an HTTPS DNS record to advertise HTTP/3 support, enabling browsers to skip a round trip on the first connection by using QUIC immediately.

Iroh 1.0 is a stable release of a peer-to-peer networking library that uses cryptographic keys instead of IP addresses, enabling direct, secure connections across diverse transports and platforms.

Cloudflare details a bug in their QUIC implementation, quiche, where a Linux kernel optimization for CUBIC congestion control caused performance issues, and describes the resulting fix.

Researchers use QUIC backscatter from network telescopes to infer retransmission configurations of Google, Meta, and Cloudflare servers, revealing deployment details despite QUIC’s privacy aims.

Iroh is a Rust library for peer-to-peer networking that simplifies connecting endpoints by public key, using hole-punching and QUIC with fallback relay servers, and provides composable protocols like blobs, gossip, and docs.