Transport Layer Security, certificates, encryption, handshakes and network security best practices.
4 articles
Fleet inventory, enterprise ACME, endpoints no script can reload, Let's Encrypt rate limits and DCV reuse: the field playbook for SSL certificate renewal automation across 50 to 1,000 certificates.
Inventory, issuance, deployment, renewal, revocation, monitoring: the 6 phases of the certificate lifecycle, ACME/ARI automation, and an action plan to keep up with 47-day renewals.
Everything about the CAA DNS record: syntax, issue/issuewild/iodef tags, critical flag, inheritance, RFC 8659 and 8657, multi-provider setup, and auditing.
HSTS (RFC 6797) forces browsers to contact your site only over HTTPS. This guide covers the protocol, the directives, per-stack configurations and how to submit to the Chrome preload list.