Collaborate Disseminate
I am exploring how to use docker secrets, but all the secrets are visible in plain text format to anyone who can use the docker command. How do I ensure all secrets are sufficiently protected and not as readily accessible to unauthorized … Continue reading How to use `docker secret` to prevent secrets from being seen in plain text by unauthorized individuals
I read through the answers from this question here:
https://stackoverflow.com/questions/21297139/how-do-you-sign-a-certificate-signing-request-with-your-certification-authority
But my comprehension on the matter is still weak. I am trying… Continue reading Making CA certificates with `-subj` vs. `openssl-ca.cnf`?
I am not confident in my understanding of Certificate Authority and signing certificates. I’m wondering how do you verify the authenticity of an issuer when inspecting an entity certificate.
Here’s the scenario that I am using to improve … Continue reading Openssl command to verify authenticity of CA Issuer? And the "magic" behind it? [duplicate]
Due to certain circumstances, we are forced to keep some copyrighted data in an external hard disk. due to privacy concerns, we want to allow this data to be accessed only from a trusted/office provided device. if this external disk is con… Continue reading Protect the content of External Disk/USB Storage
It is not clear to me how the Common Name affects a certificate authority and the certificates that are ultimately created. For example, I have this simple script that creates some files for a certificate authority auto-generated/ca.* and… Continue reading Criteria for Common Name of Certificate Authority and how it affects SSL certificates
Let’s say I made a platform called the HelloWorld Platform. The HelloWorld Platform consists of one RaspberryPi that hosts PHP based REST API and one RaspberryPi that has temperature sensor that relays data to a self-hosted bash script w… Continue reading Creating SSL certificates that can work on any local area network?
I’ve been trying to read more about self-signed SSL certificates versus creating my own certificate authority to sign SSL certificates. I am still not completely clear on this.
I’ll start by explaining my use case: I have customers that … Continue reading Other benefits of creating my certificate authority aside from the firefox issue and centralized management of certificates?
I am learning how to improve email deliverability. Along the way, I’m learning about DMARC reports, SPF and DKIM. I have a friend with a small business who said I can practice with this email service which is hosted with Google Workspace… Continue reading Is my DMARC report saying legitmate emails are failing or illegitimate emails are passing?
I’ve long since been storing credentials to databases and services in local configuration files during development. Sometimes these need to be to production systems, which makes this a security issue.
I’m wondering what the best practice h… Continue reading Local development credential manager and best practices
I seek protection against MITM & snooping of VPN or Tor proxy traffic on public WiFi.
So, what are the different security impacts of each of these 2 solutions:
Using a VPN (like Proton VPN) to connect to the internet while using publi… Continue reading What is the difference between a VPN and a Tor Socks proxy on public wifi?