Marcus Bointon
I'm a skier, songwriter, PHP & Laravel developer, privacy advocate, sysadmin, technical writer, and the author of "The HTTP/3 book". I work as a pentester and writer for Radically Open Security, work on smartmessages.net, and support 1CRM. I'm the maintainer of PHPMailer (the second-most forked PHP project on GitHub!) and contribute to many other open-source projects. I've spoken at many conferences around the world. I live in the French alps with my wife, kids, guitars, skis, and bikes.
Proposals - Montreal 2027
Magical client-side logging – the little headers that could
In a server side app, it's easy to find out what went wrong from logs. But what about the client side? The W3C's Reporting API for Content-Security-Policy, Network Error Logging, Document and permission policies, and reporting endpoint HTTP headers can let you know about all kinds of client-side issues that you'd otherwise never see. Find out how to use them, and solve all the problems that only your customers have been seeing!
Defending a critical service: Hardening SSH
SSH is critical for secure remote access, yet misconfigurations and outdated practices expose systems to unnecessary risks. In this talk, we'll look at ways to minimise exposure, analyse and harden SSH configurations, moving beyond mediocre default setups to create a strong defence against drive-by noise, brute-force attacks, credential leaks, and unauthorised access. We'll also look at post-quantum cryptography in SSH, and what the future holds.
Post-quantum encryption: Why and How
Quantum computing poses a looming threat to current encryption algorithms, so we need a new approach: post-quantum cryptography. This talk explores why we need PQC, how it works, why it's important to use it now, new standardised PQC algorithms like ML-KEM, industry adoption of these approaches, and practical migration steps for developers and ops people to protect our data, systems, and applications now and in the rapidly-approaching future.
