Simon Josefsson

You can hire me to:

• implement and standardize network protocols,
• port or develop free applications (including my own) for embedded devices,
• work on a project that you believe I will find interesting.

I am primarily working with network security and internationalization technologies related to (for example):

• Kerberos,
• SASL,
• GSS-API,
• TLS,
• S/MIME,
• EAP, PEAP, TTLS,
• DNSSEC,
• OpenPGP,
• IDN, and
• Unicode.

I offer development and support contracts for the following free software products:

• Shishi - Kerberos implementation,
• GNU Simple Authentication and Security Layer (SASL),
• Libidn - Internationalized domain names,
• GNU Generic Security Service (GSS-API),
• GNU Transport Layer Security (TLS),
• Libgcrypt - Low-level crypto library, and
• Libtasn1 - ASN.1 library.

I work from a home office in Stockholm with international customers over the Internet. Please contact me to discuss details.

Writing

• Master's thesis on Network Application Security Using The Domain Name System
• On Active Attacks to Kerberos Telnet
• Swedish DNS Survey (in swedish only)
• Kerberos 5 SASL mechanism, a superset of several SASL mechanisms.
• Protected EAP, a solution to the Wireless LAN security problems.
• DNSSEC "NXT" record replacement draft (Updated copy), a solution to the privacy and zone cut problems of DNSSEC.
• URL scheme for DNS data, put certificates in DNS and refer to it using this URL scheme.
• MIME types for DNS data, send DNS data through HTTP or email.
• Base 16, 32 and 64 encodings
• Manual for Emacs smtpmail.el (as PDF)
• Storing Certificates in the Domain Name System
• The OpenPGP mail and news header
• Using TLS with Kerberos 5
• Inline PGP in E-mail is bad, Mm'kay?
• Problems with the IETF's copying permissions
• Using GSS-API Mechanisms in SASL: The GS2 Mechanism Family

Coding

• DNSSEC Walker, a zone file recovery utility for DNSSEC zones.
• GNU Privacy Guard DNS keyserver client
• DNS-based OpenPGP Keyserver for CryptNET
• NTLM library
• IMAP (RFC 2060) implementation for Emacs and Gnus
• Message submission (RFC 2476) implementation for Emacs
• Authenticated SMTP (RFC 2554) implementation for Emacs including a HMAC (RFC 2104) implementation for Emacs
• STARTTLS SMTP (RFC 2595) support for Emacs
• Implementation of format=flowed (RFC 2646) for Emacs
• Sieve scripting (RFC 3028) and management (draft-martin-managesieve-*) support for Emacs
• Sieve management (draft-martin-managesieve-*) for KDE
• S/MIME support for Emacs and Gnus, including DNS CERT cerificate retrieval
• Rijndael (AES) implementation in Emacs Lisp
• SecureEmacs project (native SSL, S/MIME etc support for emacses)
• Simple Authentication and Security Layer (RFC 2222) implementation
• Kerberos Network Authentication Service (RFC 1510) implementation
• Stringprep, punycode, IDNA (RFC 3450, 3490-3492) implementation
• Generic Security Service (RFC 2743-2744) implementation
• Autobuild, manage distributed software builds.
• GnuTLS
• Tiny ASN.1 library
• cl2html
• base64, a portable implementation of a handy command line tool

Other

• Travel Pictures (condensed into one small page too)
• OpenPGP key
• S/MIME cert