Yaroslav Rosomakho
Pronouns: he/him
Yaroslav Rosomakho is Chief Scientist at Zscaler, focusing on Internet-scale security architecture, protocol design, and the adoption of emerging technologies to address evolving business challenges. He is an active IETF contributor across multiple areas, with a particular interest in practical deployment and the long-term architectural evolution of the Internet.
Before joining Zscaler, Yaroslav held senior technical and leadership roles at Netskope and Arbor Networks, where he worked on cloud security, network visibility, and resilience. He collaborates closely with industry, academia, and regulatory bodies to help align security standards and guidance with operational and technological realities.
Yaroslav is passionate about open standards, interoperability, and expanding participation within the IETF community.
Roles
| Role | Group | |
|---|---|---|
| Chair | HPKE Publication, Kept Efficient (hpke) | [email protected] |
| Chair | Secure Evidence and Attestation Transport (seat) | [email protected] |
| Reviewer (See reviews) | Security Area Directorate (secdir) | [email protected] |
External Resources
| Name | Value |
|---|---|
| GitHub Username | https://github.com/yaroslavros |
RFCs (0)
Yaroslav has no RFCs as of 2026-02-27.Active Internet-Drafts (18)
- draft-ietf-tls-extended-key-update
- draft-ietf-intarea-proxy-config
- draft-rosomakho-httpbis-outdated-proxy-config
- draft-rosomakho-tls-wimse-cert-hint
- draft-ietf-tls-keylogfile
- draft-ietf-quic-extended-key-update
- draft-ietf-wimse-identifier
- draft-rosomakho-tls-cert-update
- draft-yusef-tls-pqt-dual-certs
- draft-ietf-wimse-mutual-tls
- draft-ietf-wimse-workload-creds
- draft-ietf-wimse-workload-identity-practices
- draft-rosomakho-masque-connect-ip-optimizations
- draft-rosomakho-oauth-dpop-rt
- draft-ietf-masque-connect-ip-dns
- draft-reddy-pquip-pqc-signature-migration
- draft-rosomakho-httpbis-h3-unbound-data
- draft-ietf-wimse-arch
Expired Internet-Drafts (11)
- draft-rosomakho-httpbis-secondary-client-certs
- draft-rosomakho-masque-reverse-connect
- draft-rosomakho-quic-extended-key-update
- draft-various-httpbis-h3-webtrans
- draft-rosomakho-wimse-tokentranslation-reqs