hey world

me

• Steven Collison
• engineer of frontends @ AWS EC2 Networking
• steven@raycoll.com
• soco@amazon.com
• https://github.com/raycoll

a few public projects

• https://github.com/aws/s2n-tls
• https://github.com/aws/http-desync-guardian
• https://github.com/awslabs/aws-lc

publications

• [2025-11-21] AWS Application and Network Load Balancers now support Post-Quantum key exchange for TLS
• [2025-11-21] Enhancing API security with Amazon API Gateway TLS security policies
• [2025-11-19] Amazon S3 now supports Post-Quantum TLS key exchange
• [2025-02-04] Security Protocol Handshake Offloading
• [2024-11-21] Amazon API Gateway supports custom domain names for private REST APIs
• [2024-06-10] AWS re:Inforce 2024 - Cloud upgrade: Modern TLS encryption for all AWS service connections
• [2024-02-15] AWS API Gateway now supports TLS 1.3
• [2024-02-06] The impact of data-heavy, post-quantum TLS 1.3 on the Time-To-Last-Byte of real-world connections
• [2024-01-19] Stronger TLS certificate support on AWS Network Loadbalancer
• [2023-11-20] Application and Network Load Balancer now supports FIPS 140-3 for TLS Termination
• [2023-11-13] IAM Condition Key support for AWS ELB TLS security policies
• [2023-11-01] Mutual TLS authentication for Application Load Balancer
• [2023-09-13] Faster AWS Cloud Connections with TLS1.3
• [2023-06-28] All AWS endpoints to use a minimum of TLS1.2
• [2023-05-01] AWS IoT Custom Domains now supports TLS1.3
• [2023-03-22] AWS Application Loadbalancer now supports TLS1.3
• [2023-01-10] JDK Session Ticket Memory Handling Improvements
• [2022-11-29] AWS VPC Lattice
• [2022-08-02] Distributed TLS session ticket resumption with keys derived from multiple sources
• [2022-07-05] Hybrid PQC with Kyber for some AWS services
• [2022-03-17] AWS Security Bulletin AWS-2022-003
• [2022-03-01] Post Quantum Cryptograpy(PQC) in TLS for AWS KMS
• [2021-10-14] TLS1.3 support in NLB
• [2021-09-02] S3 Multi Region Access Points
• [2021-04-16] AWS Security Bulletin AWS-2021-002
• [2021-03-31] All AWS FIPS endpoints use minimum of TLS1.2
• [2021-03-25] Custom Domains support in AWS IoT
• [2021-02-02] S3 Private Link support
• [2020-09-10] Mutual TLS authentication support in AWS API Gateway
• [2019-09-12] AWS NLB multiple certificate support(SNI)
• [2019-02-26] CVE-2019-1559
• [2019-01-24] TLS listener support for AWS NLB
• [2017-10-10] AWS ALB multiple certificate support(SNI)
• [2017-02-24] 100% of AWS S3 traffic uses s2n for TLS

posts