Alex Krivit (@ackriv) header
Alex Krivit (@ackriv) profile picture

Alex Krivit

@ackriv

Product Manager @Cloudflare. also other things.

 Internet
Joined June 2013
  • Tweets1.1K
  • Following392
  • Followers801
170Media
Photo by Alex Krivit (@ackriv)Photo by Alex Krivit (@ackriv)Photo by Alex Krivit (@ackriv)Photo by Alex Krivit (@ackriv)Photo by Alex Krivit (@ackriv)Photo by Alex Krivit (@ackriv)Photo by Alex Krivit (@ackriv)Photo by Alex Krivit (@ackriv)Photo by Alex Krivit (@ackriv)Photo by Alex Krivit (@ackriv)
hugops
DebugBear (@DebugBear) profile pictureDebugBear
@DebugBearOct 29
We're impacted by an ongoing security incident. If you use our RUM product, please remove the embed code from your website.
2
281
As a society, we’re all in agreement that the escape room phase is over, right?
1
13
562
Range caching used to have a knob nobody could set right! Too small: floods of tiny origin fetches. Too big: a few-MB seek could pull 128 MiB from origin. So we deleted the knob. R2's p99 TTFB was cut in half. Origin Range Requests, now on every plan: blog.cloudflare.com/origin-r…
Origin Range Requests: Serving large files without range-request tuning

Origin Range Requests: Serving large files without range-request tuning

Naive byte-range caching can waste gigabytes of origin bandwidth on small requests. We rebuilt our cache architecture in Pingora to coordinate partial fetches automatically, cutting R2 p99 latency in...

blog.cloudflare.com
5
1
1
21
781
Leaders gotta lead
Ben is NOT "jamin" (@BenjaminMuses) profile pictureBen is NOT "jamin"@BenjaminMusesOct 21
Taylor Swift's silence on the PHP CVE is deafening
2
207
Seems very bad… look at your origins yall
The PHP Foundation (@ThePHPF) profile pictureThe PHP Foundation@ThePHPFOct 20
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
1
1
107
seems very bad... look at your origins ya'll
Christopher Patton (@cjpatton_) profile pictureChristopher Patton@cjpatton_Oct 20
blog.cloudflare.com/emudhra-…
8 eMudhra certificates are compromised. Here's what you need to know

8 eMudhra certificates are compromised. Here's what you need to know

Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the impact, our response, and what...

blog.cloudflare.com
1
10
8,667
I like to party
Matthew Prince 🌥 (@eastdakota) profile pictureMatthew Prince 🌥
@eastdakotaOct 16
Amused that AWS just unilaterally cancelled Cloudflare's Reinvent booth. There are always signs when someone finally realizes they're losing. Guess we'll just attend and throw the most fun side events without paying Amazon! Reply if you want an invite.
1
210
What are you cheffing with clef? Show me some cool stuff
michelle (@michellechen) profile picturemichelle
@michellechenOct 11
been refreshing this page all weekend and clef just surpassed openai for 2nd place in decision model market share, so i had to document it. feel incredibly grateful and proud to be in the arena.
Image from michelle (@michellechen)
1
1
6
503
are we using a lot of jxl these days? developer.chrome.com/blog/jp…
Shipping JPEG XL in Chrome | Blog | Chrome for Developers

Shipping JPEG XL in Chrome  |  Blog  |  Chrome for Developers

JPEG XL offers better compression than JPEG, built-in HDR support, lossless JPEG transcoding, and more.

developer.chrome.com
2
2
262
so stoked for this to finally ship! congrats to the team
Walshy (@WalshyDev) profile pictureWalshy
@WalshyDevOct 2
Introducing Cloudflare Traces Today we're launching Cloudflare Traces, a way for you to get an unprecedented view into requests going through Cloudflare! Why was a request blocked? Why did a request fail? Why was a request slow? Find out with Traces! blog.cloudflare.com/cloudfla…
2
24
2,116
shipping stuff during birthday week developers.cloudflare.com/ch… will blog it in a few weeks
Invalidate cached content instead of purging it · Changelog

Invalidate cached content instead of purging it · Changelog

Mark cached content as stale so Cloudflare revalidates it with your origin and reuses content that has not changed.

developers.cloudflare.com
4
198
Gonna go plant a Merkle Forrest across the Internet
Cloudflare (@Cloudflare) profile pictureCloudflare
@CloudflareSep 29
As post-quantum signatures threaten to inflate TLS handshakes and certificate transparency logs, Merkle Tree Certificates offer a path to compact, auditable authentication. Cloudflare’s new certificate authority will support MTC issuance at scale. cfl.re/4yZ6GCj #BirthdayWeek
Building a post-quantum certificate authority with Merkle Tree Certificates

Building a post-quantum certificate authority with Merkle Tree Certificates

Cloudflare’s new certificate authority will support MTC issuance at scale.

blog.cloudflare.com
1
4
24
6,070
The long game with vary 🤑... more on compression dictionaries soon!
Patrick Meenan (@patmeenan) profile picturePatrick Meenan@patmeenanSep 22
Yay! Underappreciated but "vary" support is critical for using compression dictionaries effectively and leveraging the edge cache for deltas.
5
452
We were told Vary is “the ugliest part of HTTP.” So naturally we spent a bunch of time implementing it. Cloudflare now supports Vary in Cache Rules. You can normalize the chaos instead of choosing between wrong responses and a useless cache. blog.cloudflare.com/vary-sup…
We just shipped support for the ugliest part of HTTP: Vary

We just shipped support for the ugliest part of HTTP: Vary

Vary support is now available in Cache Rules on every plan. You can normalize known negotiation headers, pass exact values through to the origin when those small differences matter, or bypass cache...

blog.cloudflare.com
3
9
1
54
7,852
blog.cloudflare.com/saving-1… Friday reading
Image from Alex Krivit (@ackriv)
1
2
212
this is the one that's supposed to hover, right?
Tesla (@Tesla) profile pictureTesla
@TeslaSep 12
Go for launch
Image from Tesla (@Tesla)
3
372
We just made connections to origin servers faster and more secure. p90 latency improved by 150ms+. 45 billion connections a day now use post-quantum encryption. and It’s automatic (obviously)! blog.cloudflare.com/automati…
Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connec...

Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connec...

Automatic Key Exchange probes TLS 1.3-capable customer origins to learn which key agreement algorithms they support. We then lead with the most secure algorithm when connecting to the origin,...

blog.cloudflare.com
2
2
19
2,596
Perf features or CDN requests? We got a bunch of stuff cooking but what’s missing?
Dane Knecht 🦭 (@dok2001) profile pictureDane Knecht 🦭
@dok2001Sep 4
Lots of what we ship for @Cloudflare Birthday Week starts with someone asking for it here. Less than a month out. Ask.
5
427
Cool post from one of our Interns about her work looking into how we can be more efficient with storage
Cloudflare (@Cloudflare) profile pictureCloudflare
@CloudflareSep 1
Could we get more cache space with the same hardware? We prototyped compression inside Cloudflare's cache to find out. cfl.re/4qNSwRy

How we could save petabytes of cache storage with Zstandard and Pingora

Could we get more cache space with the same hardware? We prototyped compression inside Cloudflare's cache to find out.

blog.cloudflare.com
1
4
1,709
Wave incoming
Greg Brockman (@gdb) profile pictureGreg Brockman
@gdbAug 27
An open letter for a global surge in cyber defense, signed by over 100 organizations including Anthropic, AWS, Google, Microsoft, OpenAI, and Oracle.
A call for collective action on cyber defense

A call for collective action on cyber defense

Article · @gdb
1
3
542
Load more