-
Encrypting MySQL Data at Rest
Encrypting MySQL data at rest with InnoDB tablespace encryption, and why it’s not a substitute for application-level encryption of sensitive fields.
-
Enabling HTTP/2 on Apache2
Enabling HTTP/2 on Apache2 with mod_http2, and why it only actually works in practice paired with HTTPS.
-
A Practical mod_rewrite Cheat Sheet for Apache
A practical mod_rewrite cheat sheet: HTTPS redirects, pretty URLs, and the [L] and [QSA] flags that show up in almost every rule.
-
Choosing Hardware for a Dedicated VPN Router
Choosing hardware for a dedicated VPN router: why VPN encryption genuinely demands more than typical consumer router CPUs provide.
-
Securing Apache2 with Let’s Encrypt SSL Certificates
Securing Apache2 with free Let’s Encrypt SSL certificates via certbot, and why the 90-day validity period is intentional.
-
JWTs Explained: What They Are and Common Mistakes
JWTs explained: what the signature actually guarantees, the critical signed-vs-encrypted misunderstanding, and the algorithm-confusion attack it enables.
-
The TLS Handshake Explained Step by Step
The TLS handshake explained step by step, and why HTTPS uses both asymmetric and symmetric cryptography together rather than just one.
-
Full Disk Encryption on Linux with LUKS
Full disk encryption on Linux with LUKS, and why backing up the LUKS header separately is a critical, often-skipped step.