<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title>Open-Source on Security Architects</title>
		<link>https://securityarchitects.com/tags/open-source/</link>
		<description>Recent content in Open-Source on Security Architects</description>
		<generator>Hugo</generator>
		<language>en-us</language>
		
		
		
		
			<lastBuildDate>Tue, 14 Jul 2026 10:00:00 -0700</lastBuildDate>
		
			<atom:link href="https://securityarchitects.com/tags/open-source/index.xml" rel="self" type="application/rss+xml" />
			<item>
				<title>Authinator3 is now open source</title>
				<link>https://securityarchitects.com/post/authinator3-open-source/</link>
				<pubDate>Tue, 14 Jul 2026 10:00:00 -0700</pubDate>
				<guid>https://securityarchitects.com/post/authinator3-open-source/</guid>
				<description>&lt;p&gt;We&amp;rsquo;ve published the core of &lt;strong&gt;Authinator3&lt;/strong&gt; as open source under the ISC&#xA;license: &lt;a href=&#34;https://gitlab.com/jowolf/authinator3&#34;&gt;gitlab.com/jowolf/authinator3&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Authinator is a web login gateway for firewalls. Authenticate over HTTPS,&#xA;click once, and your current IP address is granted passage through the&#xA;firewall — everyone else sees a wall. It replaces both permanently-open&#xA;management ports and brittle port-knocking schemes with something anyone can&#xA;operate from a phone: a login page.&lt;/p&gt;&#xA;&lt;p&gt;Authinator has guarded our own production gateways in one form or another&#xA;since 2007. Authinator3 is the modernized cross-platform release: a single&#xA;self-contained Go binary per platform, driving OpenBSD &lt;code&gt;pf&lt;/code&gt; tables (confined&#xA;by &lt;code&gt;pledge&lt;/code&gt;/&lt;code&gt;unveil&lt;/code&gt;, no sudo, no shell calls) or Linux &lt;code&gt;nftables&lt;/code&gt; sets&#xA;(under a locked-down systemd service). Default-deny, explicit allow, with an&#xA;audit view of every address currently cleared through.&lt;/p&gt;</description>
			</item>
	</channel>
</rss>
