In 1992 continued at the University of Bradford on a PhD based on
the internet control of a Robotic Telescope.
Initially using an interactive gopher server, but switching to the NCSA web server
in October 1993, and then Apache.
In April 1995 joined the core development team of Apache, finding and fixing
security issues and writing modules such as mod_status. I became a founding
member of the Apache Software Foundation, and currently serve as VP, Security.
In 1997 founded C2Net Europe, designing and
developing Stronghold, a secure
web server based on Apache, and building up a small team as Managing Director. Contributed
to various open source projects including mod_ssl and became
a founding member of the OpenSSL project.
In 2000 C2Net merged with Red Hat and I founded the Red Hat Product Security
team which I led until 2018. Since 2002 I have been an editorial board member of the Mitre CVE project.
I'm an Open Source evangelist and Maker, working at
Red Hat and
with OpenSSL and Apache to
improve software security.
In any spare time I work on various
home automation software
and hardware, i've been known to wander onto stage as part of
Sonik, I Cosplay, and I'm probably
listening to A State of Trance