Security
Guides, how-tos, and updates on Security.
14 articles
How HTTPS Works: the TLS handshake, explained simply
That little padlock does a lot of work. Here's what actually happens when you connect over HTTPS — the TLS handshake, certificates and encryption — without the cryptography headache.
SSL/TLS Handshake Failed: causes and how to fix it
When the secure connection can't be agreed, you get a handshake failure — and the page never loads. Here's what goes wrong during the TLS handshake, and how to fix each cause.
Mixed Content Warnings: what they are and how to fix them
Your site is on HTTPS, but the padlock has a warning — or images won't load. That's mixed content: a secure page pulling in insecure resources. Here's how to find and fix it.
What is a Firewall?
A firewall is the gatekeeper that decides which network traffic gets through and which gets blocked. Here's what firewalls do, the main types, and the gotcha they create for monitoring.
TLS 1.2 vs 1.3: what changed (and why it matters)
TLS 1.3 made HTTPS both faster and more secure than 1.2 — by doing less, not more. Here's what changed in the handshake, why it matters, and what to make sure your servers support.
HSTS Explained: forcing browsers to always use HTTPS
You redirect HTTP to HTTPS — but that first insecure request is still a risk. HSTS closes that gap by telling browsers to never even try HTTP. Here's how it works and how to deploy it safely.
What is a DDoS Attack? (and how to defend against one)
A DDoS attack drowns your service in traffic from thousands of sources until it buckles. Here's how these attacks work, the main types, and the practical layers of defence.
What is a WAF (Web Application Firewall)?
A regular firewall guards the network; a WAF guards your application — inspecting web requests and blocking attacks like injection and bots. Here's how it works and what it does (and doesn't) cover.
Zero Trust Explained
The old security model trusted anyone inside the network. Zero Trust throws that out: trust nothing, verify everything, every time. Here's what it means in practice.
What is a CVE? Vulnerability basics
When a security flaw is found in software, it gets a CVE — a global ID so everyone can track and fix it. Here's what CVEs are, how severity is scored, and how to stay on top of them.
Secrets Management Explained
API keys, passwords and tokens are the keys to your kingdom — and they end up hard-coded, committed to git, and shared in chat far too often. Here's how to handle secrets properly.
What is mTLS (Mutual TLS)?
Normal HTTPS proves the server's identity to you. mTLS goes both ways — the client proves itself too. Here's what mutual TLS is, where it's used, and why it's a Zero Trust building block.
Domain Spoofing and How to Prevent It
Scammers can send email that looks exactly like it's from your domain — phishing your customers and torching your reputation. Here's how domain spoofing works and how to lock it down.
DNSSEC Explained: signing DNS so it can't be faked
DNS was built without security — answers can be forged, sending users to fake servers. DNSSEC adds cryptographic signatures so resolvers can verify DNS answers are genuine. Here's how.