Low Entropy

About Me

My name is Martin Thomson.

I’m a Distinguished Engineer at Mozilla. I work with the many fine people at Mozilla and other companies to build a better Internet. My interests are in networking, security, and the web, but I’m a bit of a generalist.

Recently, my attention has been on the use of finding ways to support advertising that don’t have a high human cost in privacy violations. I helped found the W3C Private Advertising Technology Community Group where the goal is to apply technology to online advertising while maintaining strong guarantees for individual privacy.

The IETF has published a number of RFCs with my name on them.

Published work includes Oblivious HTTP (RFC 9458, RFC 9292) QUIC (RFC 8999, RFC 9000, RFC 9001), HTTP/2 (RFC 9113), WebPush (RFC 8030, RFC 8291, RFC 8292, and the W3C API).

I’ve also published extensions to HTTP (RFC 7639, RFC 8188, RFC 8164), TLS (RFC 8449), WebRTC (RFC 7675) and HELD (RFC 5985, RFC 5986, and many more).

I’ve written about protocol maintenance (RFC 9413), maintaining protocol extensibility (RFC 9170), how to use early data in HTTP (RFC8470), why using SSL 3.0 is no longer a good idea (RFC 7568, and how to manage use of GitHub at the IETF (RFC8874).

I’ve worked at Nortel Networks, Andrew/Commscope, Microsoft (Skype), and Mozilla. I served on the Internet Architecture Board (IAB) from 2016 to 2020 and the W3C Technical Architecture Group (TAG) from 2024.

I’ve helped a few IETF working groups complete their work as chair (geojson, captive portals, sframe). I served as the 2023 NomCom chair.

Likely against all good sense, I write code. I am a module owner of NSS, which includes the TLS and cryptography stack used by Firefox. I also wrote a lot of neqo, which is the QUIC stack used by Firefox. I maintain tools for managing Internet-Drafts and an improved stylesheet for RFCs.

Find more of my work on GitHub.