PyTorch starts securing plaintext TCPStore with mutual TLS and PSKs

PyTorch added mutual TLS and TLS 1.3 pre-shared-key authentication to TCPStore on its main branch, with commits credited to Tristan Rice (@d4l3k), a PyTorch Distributed maintainer, dated November 10th-13th, 2026. The first pull request adds mutual certificate authentication for the libuv server and blocking clients, and the second adds PSK authentication plus fail-closed hardening rules including REQUIRE-TLS and a 10-second handshake limit. The change gives the distributed-training coordination service opt-in authentication and encryption for connections the certificate commit describes as previously unauthenticated plaintext.

PyTorch starts securing plaintext TCPStore with mutual TLS and PSKs Commits credited to Tristan Rice add mutual TLS, TLS 1.3 PSKs, REQUIRE-TLS, and a 10-second handshake limit to TCPStore on main, with commit activity dated November 10th-13th, 2026 and no dated merge record in the supplied sources. By RuntimeWire Staff https://runtimewire.com/author/runtimewire-staff · Published PyTorch has added mutual TLS and TLS 1.3 pre-shared-key authentication for TCPStore on its main branch, giving the distributed-training coordination service opt-in authentication and encryption for connections that the certificate commit describes as previously unauthenticated plaintext. Tristan Rice @d4l3k , whose GitHub profile identifies him as a maintainer for PyTorch Distributed, is credited on both linked pull requests. The first adds mutual certificate authentication for the libuv server and blocking clients. The second adds PSK authentication and a set of fail-closed hardening rules.…