Tag: #tls
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 19 posts
19 posts are tagged #tls; the most recent was published on 2026-08-15.
Often tagged together: #security 10 #2026-03 7 #ssl 7 #devops 6 #networking 6
Most read in the last 90 days:
- TLS/SSL and PKI Complete Guide — Handshake, Certificate Chain, Cipher Suites, 0-RTT, and the Post-Quantum Era (2025)
- The Road to 47-Day TLS Certificates — Step-by-Step Dates from the SC-081v3 Ballot Text, Let's Encrypt's 45-Day Transition, and ACME ARI
- Automating Ingress TLS — Fully Automated Certificates with cert-manager and ACME
The Complete Guide to TLS Certificates: Handling Them End to End with openssl ♪ Listenable
A purpose-by-purpose reference of the openssl commands for reading certificates, creating CSRs, verifying chains, converting formats, and diagnosing server connections. Also covers how to identify expiry, a missing chain
2026-08-15 · 18 min read #리눅스#tls#인증서#openssl#보안Decoding the TLS handshake and certificate errors — why the browser works but curl fails
When the browser shows a healthy padlock while only curl and server-side calls fail with a certificate error, the problem is server configuration. The browser downloads the missing intermediate certificate itself through
2026-07-26 · 15 min read #network#tls#ssl#openssl#securityThe Road to 47-Day TLS Certificates — Step-by-Step Dates from the SC-081v3 Ballot Text, Let's Encrypt's 45-Day Transition, and ACME ARI
As of March 15, 2026, the maximum lifetime of publicly-trusted TLS certificates has already dropped from 398 days to 200 days, and under the schedule locked in by the CA/B Forum ballot (SC-081v3) it keeps falling — to 10
2026-07-17 · 16 min read #security#tls#certificates#webpki#automationWhy Post-Quantum Certificates Are Not Here Yet — ML-DSA Signature Size, the 10kB Wall, and Merkle Tree Certificates ♪ Listenable
In the post-quantum transition, key exchange (encryption) is already well underway, but certificates and signatures are still at the starting line. The reason isn't cryptography — it's size. The ML-DSA-44 signature defin
2026-07-16 · 21 min read #security#post-quantum-cryptography#tls#webpki#certificatesTraefik Advanced — Middleware Design, TLS Options, Multi-Provider
A production-focused deep dive into Traefik middleware chains, forwardAuth-based SSO, TLSOption and mTLS, weighted routing and mirroring, multi-provider composition, and Yaegi plugins. We also cover canary deployments, o
2026-06-14 · 15 min read #traefik#middleware#tls#kubernetes#networkingAutomating Ingress TLS — Fully Automated Certificates with cert-manager and ACME
A hands-on guide to fully automating TLS certificates for Kubernetes Ingress using cert-manager and Let’s Encrypt ACME. Covers the Issuer/Certificate CRD model, HTTP-01 versus DNS-01 challenges, wildcard certificates, re
2026-06-14 · 17 min read #ingress#kubernetes#cert-manager#tls#acmeTLS/SSL and PKI Complete Guide — Handshake, Certificate Chain, Cipher Suites, 0-RTT, and the Post-Quantum Era (2025)
Behind the little padlock in the browser address bar lie 30 years of cryptography, trust chains, and protocol evolution. How TLS 1.2 2-RTT became 1.3 1-RTT, how the certificate chain makes you trust a server you have nev
2026-04-15 · 12 min read #tls#ssl#pki#https#certificateTCP/IP & Network Programming Deep Dive 2025: Sockets, HTTP/3, QUIC, DNS, TLS 1.3 ♪ Listenable
Network programming deep dive! TCP 3-way/4-way handshake, congestion control (Cubic/BBR), socket programming (epoll/kqueue/iouring), HTTP/1.1 vs HTTP/2 vs HTTP/3 (QUIC), DNS resolution, TLS 1.3 handshake, network debuggi
2026-04-14 · 20 min read #tcp-ip#networking#socket#http3#quicWireshark & Network Security Complete Guide: From Packet Sniffing to Intrusion Detection — Security for Developers ♪ Listenable
Master network security with Wireshark hands-on. From packet capture, TCP/HTTP analysis, TLS decryption, ARP spoofing detection, SQL injection detection, to DDoS pattern analysis — a practical guide at security engineer
2026-03-23 · 29 min read #wireshark#network-security#packet-analysis#cybersecurity#tcpdumpNetworking Fundamentals Every Developer Must Know: TCP/IP, HTTP, DNS, TLS to gRPC and WebSocket ♪ Listenable
A comprehensive guide to networking fundamentals every developer must know. From the TCP/IP 4-layer model, HTTP/1.1 vs 2 vs 3, DNS resolution, TLS handshakes, gRPC, WebSocket, CDN, to load balancers — a practical guide y
2026-03-23 · 27 min read #networking#tcp-ip#http#dns#tlsLive Migration 3: Why Migration Proxy, Ports, TLS, and Sockets Are Needed
Explains why KubeVirt places a migration proxy between source and target launchers in live migration, and how it combines ports, Unix sockets, and TLS paths.
2026-03-20 · 5 min read #architecture#kubevirt#live-migration#networking#tls[DevOps] Let's Encrypt and Certbot Complete Guide: Free TLS Certificates
A comprehensive guide covering Let's Encrypt ACME protocol mechanics, Certbot installation and certificate issuance, DNS/HTTP challenges, automatic renewal setup, and wildcard certificates.
2026-03-20 · 9 min read #devops#tls#ssl#letsencrypt#certbot[DevOps] Nginx TLS Configuration Complete Guide: PEM/Key Setup and Security Optimization
A comprehensive guide to applying PEM/Key files in Nginx, configuring TLS versions and cipher suites, HSTS, OCSP Stapling, HTTP/2 optimization, and mTLS setup.
2026-03-20 · 11 min read #devops#nginx#tls#ssl#securityNetwork Engineering & Security Master Guide: From TCP/IP to Service Mesh and AI Serving Networks
A complete networking guide for AI engineers covering TCP/IP fundamentals, gRPC, Istio service mesh, Zero Trust security, and real-time LLM streaming.
2026-03-17 · 11 min read #networking#grpc#tls#service-mesh#istioThe Complete HTTP/HTTPS Troubleshooting Guide - Production Debugging Techniques ♪ Listenable
A comprehensive guide covering HTTP status code analysis, TLS handshake debugging, certificate chain validation, advanced curl techniques, 502/503/504 error resolution, CORS issues, redirect loops, HTTP/2 and HTTP/3 debu
2026-03-08 · 22 min read #networking#http#https#tls#troubleshootingSSL Certificate Operations Playbook: Zero-Downtime Renewal and Expiry Prevention ♪ Listenable
A comprehensive operations playbook covering the entire certificate lifecycle (issuance, deployment, monitoring, renewal, revocation). Covers zero-downtime renewal strategies, Prometheus-based expiry monitoring, incident
2026-03-08 · 21 min read #ssl#certificate#tls#devops#2026-03SSL/TLS Certificate Complete Guide: From Issuance to Auto-Renewal and Troubleshooting
A comprehensive practical guide covering SSL/TLS certificate fundamentals, Let's Encrypt automated issuance, Nginx/AWS environment configuration, certificate auto-renewal, and common error resolution.
2026-03-08 · 13 min read #devops#ssl#tls#certificate#securityThe Complete Security Guide for Developers — From Encryption to Zero Trust ♪ Listenable
Symmetric and asymmetric encryption, hashing, TLS handshake, OWASP Top 10, SQL Injection, XSS, CSRF, and Zero Trust architecture. A comprehensive summary of security concepts every developer must know, complete with code
2026-03-02 · 29 min read #architecture#security#encryption#zero-trust#owaspNginx Configuration Complete Guide: 15 Essential Topics from Architecture to Production Optimization ♪ Listenable
From Nginx event-driven architecture and configuration structure to reverse proxy, load balancing, SSL/TLS, caching, rate limiting, security headers, performance tuning, and health checks -- a comprehensive guide to 15 e
2026-03-01 · 33 min read #nginx#reverse-proxy#load-balancing#ssl#tls