Unterminating Kubernetes Resources - Avoiding Unintentional Data Loss
Learn to build a Golang program interfacing with ETCD to prevent data loss by reversing termination of bound PVCs in Kubernetes, with step-by-step guidance on implementation and key concepts.
Implementing Cert-manager in Kubernetes
Explore cert-manager implementation in Kubernetes for secure SSL/TLS certificate management. Learn key features, advantages, and integration with services like Let's Encrypt and HashiCorp Vault.
Using Cert-Manager for Safer Private PKI
Explore private PKI deployment using cert-manager for cloud-native environments. Learn best practices for safe implementation and rotation to avoid outages and enhance security.
Protecting Kubernetes Clusters When Administrators Quit - Revoking Access and Best Practices
Explore strategies for revoking access to Kubernetes clusters when administrators or users leave, addressing real-world security challenges and best practices for minimal disruption.
Practical Istio Use Cases and Demonstrations
Explore real-world Istio implementations for high availability, secure communication, and traffic management in microservices architectures through concrete use cases and live demos.
How to Inject Faults into Common HTTPS Clients and Services
Explore fault injection techniques for HTTPS clients and services, focusing on Chaos Mesh project, network topology, and HTTP-Chaos rules for improved cloud-native resilience.
How to Send Alerts in Prometheus Using Alertmanager
Learn to set up Alertmanager with Prometheus, configure alerting rules, and send customized alerts for effective system monitoring. Covers installation, configuration, and practical examples of alert creation.
STIR SHAKEN to Stop Robocalling
Explore the STIR/Shaken framework to combat robocalling, including its architecture, security considerations, and implementation challenges for voice service providers.
Interceptor - A PowerShell SSL MITM Script
Explore PowerShell SSL MITM techniques, including web privilege escalation, certificate creation, HTTP request handling, and response injection. Learn practical applications and script extensions.
Hansel and Gretel Do TLS
Demystifying TLS encryption: Learn about its components, implementation, and importance for secure internet communication. Explore related concepts like OCSP, HSTS, and HTTP/2.
Certificate Transparency Logs - Roadmaps to Riches or Ruin?
Explore the dual nature of Certificate Transparency Logs in Web PKI: their role in ensuring certificate authenticity and potential misuse by malicious actors for reconnaissance.
SSL - TLS for Mortals
Demystifying SSL/TLS: Learn secure communication essentials, from public/private keys to practical implementation, empowering you to become the go-to expert for transport-level security in your team.
Does Certificate Transparency Break the Web? Measuring Adoption and Error Rate
Exploring Certificate Transparency adoption, challenges, and impact on web security. Analyzes deployment strategies, error rates, and lessons for future large-scale security implementations.
Building Secure & Auditable Container Images Using Chainguard's Tooling - Melange, Apko & Wolfi
Explore secure container image creation using Chainguard's tools. Learn to build minimal, auditable images with SBOMs, manage ca-certs, and enhance supply-chain security through practical demonstrations.
Making an Internal Let's Encrypt Relay Server
Learn to create an internal Let's Encrypt relay server for secure certificate management, exploring advantages, requirements, and implementation steps.
Identity Management, Single Sign-On and Certificates with FreeIPA
Explore FreeIPA's comprehensive identity management solution for authentication, authorization, and PKI. Learn installation, integration, and key features for centralized user management and security.
Hacking Exposé Too - Just How Transparent is TDE?
Explore Transparent Data Encryption (TDE) in SQL Server, its implementation, and potential vulnerabilities through hands-on demonstrations and practical insights.
gRPC Proxyless Service Mesh with Security
Explore gRPC's proxyless service mesh with mTLS security, including xDS control plane orchestration, security plugins, and implementation in Google Kubernetes Environment.
Managing Kubernetes Webhooks with SPIRE
Explore automating certificate management for Kubernetes Webhooks using SPIRE, simplifying operations and integrating with the existing workload trust chain.
Working Out SPIFFE Identity for Cilium CNI
Explore SPIFFE identity integration with Cilium CNI, covering design challenges, extended use cases, and comparisons to other solutions for enhanced network security and policy enforcement.
PKI for Gophers
Explore Go primitives for PKI, including certificate hierarchies, mTLS, hardware-backed keys, and public infrastructure. Dive into automated issuance, revocation, and custom PKI implementation.