body { max-width: 80em; } td { padding: 0.5em; text-align: left; } td.good { background-color: #cdc; } thead td { font-weight: bold; } tbody td { border: 1px solid #ddd; } table { padding-bottom: 3em; } HTTP Strict Transport Security (HSTS), is a way to signal to a web client that valid HTTPS certificates must be...

td { padding: 0.5em; text-align: center; } td.price { text-align: end; } td.good { background-color: #cdc; } td.bad { background-color: #dcc; } thead td { font-weight: bold; } tbody td { border: 2px solid #ddd; } table { padding-bottom: 3em; } Background Cost optimization is a constant concern in cloud architecture....

Background For the last couple months I’ve been fanatic about understanding why HTTPS adoption on private networks is so poor, and so poorly implemented. I believe the challenge comes down to poor usability of the ACME certificate issuance protocols in the context of private networks, small but meaningful cost...

Abstract The X.509 Name Constraints extension is a powerful way to limit a certificate authority (CA) to only issue certificates for specific TLDs or domain names. Unfortunately, Google Chrome doesn’t currently enforce name constraints for user imported trust roots on Linux. Review of related blog posts shows that...