cd /news/machine-learning/pytorch-starts-securing-plaintext-tc… · home › topics › machine-learning › article
[ARTICLE · art-169352] src=runtimewire.com ↗ pub= topic=machine-learning verified=true sentiment=↑ positive

PyTorch starts securing plaintext TCPStore with mutual TLS and PSKs

PyTorch added mutual TLS and TLS 1.3 pre-shared-key authentication to TCPStore on its main branch, with commits credited to Tristan Rice (@d4l3k), a PyTorch Distributed maintainer, dated November 10th-13th, 2026. The first pull request adds mutual certificate authentication for the libuv server and blocking clients, and the second adds PSK authentication plus fail-closed hardening rules including REQUIRE-TLS and a 10-second handshake limit. The change gives the distributed-training coordination service opt-in authentication and encryption for connections the certificate commit describes as previously unauthenticated plaintext.

read1 min views2 publishedNov 14, 2026
PyTorch starts securing plaintext TCPStore with mutual TLS and PSKs
Image: Runtimewire (auto-discovered)

Commits credited to Tristan Rice add mutual TLS, TLS 1.3 PSKs, REQUIRE-TLS, and a 10-second handshake limit to TCPStore on main, with commit activity dated November 10th-13th, 2026 and no dated merge record in the supplied sources.

        By [RuntimeWire Staff](https://runtimewire.com/author/runtimewire-staff)
        · Published

PyTorch has added mutual TLS and TLS 1.3 pre-shared-key authentication for TCPStore on its main branch, giving the distributed-training coordination service opt-in authentication and encryption for connections that the certificate commit describes as previously unauthenticated plaintext. Tristan Rice (@d4l3k), whose GitHub profile identifies him as a maintainer for PyTorch Distributed, is credited on both linked pull requests. The first adds mutual certificate authentication for the libuv server and blocking clients. The second adds PSK authentication and a set of fail-closed hardening rules.…

source & further reading
runtimewire.com — original article Hugging Face fixes TRL bug that let RL rollouts reuse KV cache from older weights Cloudflare announces open-source Kitesurf browser engine for AI agents Six Chinese AI models carry Blackwell fingerprints in their published weights, researcher says
── more in #machine-learning 4 stories · sorted by recency
── more on @pytorch 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/pytorch-starts-secur…] indexed:0 read:1min 2026-11-14 · —