Marcus Bointon
I'm a skier, songwriter, PHP & Laravel developer, privacy advocate, sysadmin, technical writer, and the author of "The HTTP/3 book". I work as a pentester and writer for Radically Open Security, work on smartmessages.net, and support 1CRM. I'm the maintainer of PHPMailer (the second-most forked PHP project on GitHub!) and contribute to many other open-source projects. I've spoken at many conferences around the world. I live in the French alps with my wife, kids, guitars, skis, and bikes.
Montreal 2027 sessions
Magical client-side logging – the little headers that could
English session - Beginner
In a server side app, it's easy to find out what went wrong from logs. But what about the client side? The W3C's Reporting API for Content-Security-Policy, Network Error Logging, Document and permission policies, and reporting endpoint HTTP headers can let you know about all kinds of client-side issues that you'd otherwise never see. Find out how to use them, and solve all the problems that only your customers have been seeing!
Post-quantum encryption: Why and How
English session - Beginner
Quantum computing poses a looming threat to current encryption algorithms, so we need a new approach: post-quantum cryptography. This talk explores why we need PQC, how it works, why it's important to use it now, new standardised PQC algorithms like ML-KEM, industry adoption of these approaches, and practical migration steps for developers and ops people to protect our data, systems, and applications now and in the rapidly-approaching future.
Montreal 2026 sessions
- Full-Stack security for web applications
- Magical client-side logging – the little headers that could
- PrAIvacy – Privacy and security in AI tools
