A technical guide on enforcing TLS 1.2 and trusted certificates for SQL Server connections to secure data in transit, covering FedRAMP compliance.
Explores the performance drawbacks of Extended Validation (EV) SSL certificates, including their lack of full OCSP stapling support.
A guide to securing HTTP-triggered Azure Functions on Kubernetes with TLS/SSL using KEDA and the NGINX Ingress Controller.
Exploring client-side certificates as a simpler, more secure alternative to OAuth for API authentication.
A guide to implementing security best practices for Go HTTP webservers, covering timeouts, TLS, and other hardening measures.
A tutorial on using a Docker image to quickly generate CA, server, and client SSL certificates for testing TLS setups.
A developer shares their simplified Let's Encrypt setup using acme-client and nginx, avoiding the complexity of certbot.
The author announces migrating their blog to HTTPS using a free Let's Encrypt certificate and requests help finding broken image links.
Guide to disabling outdated TLS protocols and ciphers in Azure API Management using ARM templates for improved security.
A technical guide on securing Kubernetes services using NGINX Ingress Controller, covering TLS setup, whitelisting, and rate limiting.
Author reflects on leaving HPE after two years of leading open-source Python HTTP ecosystem development, including HTTP/2 and TLS improvements.
A proposal for PEP 543, which aims to create a unified TLS API for Python to address issues with the current standard library approach.
A guide to using Let's Encrypt for free, trusted TLS certificates, including setup with Nginx and comparisons to paid alternatives.
A tutorial on adding HTTPS support and Dockerizing an ASP.NET Core application, including generating a self-signed certificate.
A technical critique of Sucuri Security's flawed analysis of TLS certificate verification, focusing on errors in their assessment of Python's Requests library.
A guide to implementing HTTP Public Key Pinning (HKPK) with Let's Encrypt certificates on an nginx server for enhanced TLS security.
An overview of Let's Encrypt, a free, automated, and open Certificate Authority, covering its features, limitations, and operational model.
A guide on using Wireshark to debug and analyze TLS handshakes, helping to decipher cryptic errors and understand network protocol issues.
Explains why HTTPS is crucial for security, privacy, and as a tool against censorship, even for non-sensitive web traffic.
