Filippo Valsorda Overview & Contact Data

Filippo Valsorda presents filippo.io as a personal and professional hub for a cryptography engineer and professional open source maintainer. The site documents his work on the Go programming language standard library, including the cryptography packages used by developers building secure applications. His background includes Google cryptography work leading the Go Security team until 2022 and work on the Cloudflare Cryptography team until 2017, giving the site a practical, production-oriented perspective on protocol design, key management, and secure software. For readers researching filippo cryptography or valsorda cryptography, the page functions as a reliable index to his public writing, tools, and ongoing technical interests. The website serves software engineers, security researchers, Go developers, and anyone who needs dependable information about TLS certificates, certificate development, and cryptographic tooling. It highlights Cryptography Dispatches, a lightly edited cryptography newsletter that connects current research and implementation topics with real-world engineering concerns. The site also points to words.filippo.io, where his writing since 2013 is collected, making it useful for both newcomers looking for accessible explanations and experienced practitioners seeking deeper technical context. A notable part of filippo.io is its catalog of open source projects. mkcert helps developers generate TLS certificates for local and development environments, while age and typage provide file encryption options, with typage bringing age to the TypeScript ecosystem. Sunlight supports Certificate Transparency monitoring, yubikey-agent simplifies PIV token use with SSH, and several filippo.io packages expose low-level cryptographic APIs for external use. The page also lists experimental and utility projects such as cpace, intermediates, passage, captive-browser, and homebrew-musl-cross, showing a broad focus on security, privacy, and developer workflow. The site further distinguishes itself through public vulnerability tests, contact details, and links to social platforms, reinforcing its role as a transparent, technically focused resource for the cryptography and open source communities.