TLS 1.3: Modern Encryption Without the Existential Dread
TLS 1.3 explained without the PhD: faster handshakes, better ciphers, and how to actually configure Nginx and Caddy to use it.
Tag: cryptography
All the articles with the tag "cryptography".
Certificate Pinning: The Nuclear Option for TLS Security (Use With Caution)
Certificate pinning and HPKP explained: what they are, why HPKP destroyed itself, and modern alternatives like CAA records and Certificate Transparency.
Your Server Doesn't Know What Random Means (And That's a Problem)
·
Updated:
Your freshly booted VM just generated SSH keys instantly, and that's not a good sign. Linux entropy pools explained: haveged, virtio-rng, and hardware RNG fixes.
Ed25519 SSH Keys: Ditch RSA for Good
·
Updated:
RSA SSH keys are aging out. Ed25519 is the modern default: generate one in seconds, secure it with ssh-agent, add FIDO2 hardware keys, and audit legacy keys safely.