Engineering & Code

73 posts

The Amnesia Cycle and Why AI Is Turning Developers Back Into TestersAugust 19, 202612 min readAI Engineering & Code
Compliance at the Speed of CodeOctober 3, 202513 min readCompliance & Audits Engineering & Code
The AI Paradox: Why Building Software is Both Easier and Riskier Than EverJune 25, 20259 min readAI Engineering & Code
Necessity is the Mother of Invention: Why Constraints Invite InnovationMay 20, 20252 min readLeadership & Product Engineering & Code
Crypto agility isn’t a checkbox—it’s an operational mindset.April 18, 20254 min readCryptography & Keys Engineering & Code
Beyond the Facade: Evaluating Long-Term Impacts of Enterprise Software ArchitecturesAugust 21, 20243 min readSecurity Practice Engineering & Code
The True Essence of Secure by DesignAugust 4, 20246 min readSecurity Practice Engineering & Code
Turning Catastrophe into Opportunity: Improving Processes and Vendor AccountabilityJuly 19, 20241 min readSecurity Practice Engineering & Code
Reading the Tea Leaves: What Led to the Largest IT Outage in HistoryJuly 19, 20243 min readSecurity Practice Engineering & Code
Speeding Up Development and Navigating Security RisksJune 25, 20243 min readEngineering & Code Security Practice
Integrating Security: Making Safe Software Development Seamless and ProductiveJune 20, 20247 min readSecurity Practice Engineering & Code
How TLS Certificates Can Authenticate DNS TXT RecordsApril 29, 20242 min readPKI & Certificates Engineering & Code
Evolving Challenges in Software SecurityFebruary 8, 20243 min readSecurity Practice Engineering & Code
Rethinking How We Assess Risk in the Software We Rely OnJanuary 14, 20245 min readSecurity Practice Engineering & Code
Using Caddy with Google Trust ServicesJanuary 20, 20232 min readPKI & Certificates Engineering & Code
Getting an EV Code Signing Certificate in 2022August 26, 20223 min readPKI & Certificates Engineering & Code
Software Supply Chain Risk MitigationMay 14, 20194 min readSecurity Practice Engineering & Code
What is Fortify and how does it work?June 20, 20185 min readEngineering & Code Identity & Authentication
How to keep a secret in WindowsMay 4, 20174 min readCryptography & Keys Engineering & Code
Do PDFs have to be so frustrating?March 16, 20173 min readEngineering & Code PKI & Certificates
XMLDSIG and XAdES in the browser and NodeMay 6, 20161 min readPKI & Certificates Engineering & Code
Escaping the Same-origin Policy for PKIjsJanuary 10, 20163 min readEngineering & Code PKI & Certificates
Things we think are true but are notJanuary 2, 20161 min readEngineering & Code
Graphene CLINovember 17, 20151 min readEngineering & Code Cryptography & Keys
PKIjs and trust listsOctober 28, 20151 min readPKI & Certificates Engineering & Code
PKCS #11, Javascript and NodejsOctober 20, 20151 min readEngineering & Code Cryptography & Keys
WebCrypto and the modern web appAugust 10, 20154 min readCryptography & Keys Engineering & Code
Smart cards, PC/SC and ChromeJuly 30, 20141 min readIdentity & Authentication Engineering & Code Bitcoin
Certificate Path Building in PKIjsMay 4, 20142 min readPKI & Certificates Engineering & Code
MUST STAPLE and PKI.jsApril 28, 20141 min readPKI & Certificates Engineering & Code
Generating signed messages using CMS and PKI.jsApril 28, 20141 min readPKI & Certificates Engineering & Code Cryptography & Keys
Frankencerts, new extensions and PKI.jsApril 26, 20142 min readPKI & Certificates Engineering & Code
Potential projects for PKI.JSApril 25, 20141 min readEngineering & Code PKI & Certificates
WebCrypto and PKIApril 25, 20143 min readCryptography & Keys PKI & Certificates Engineering & Code
How to generate and send a timestamp request for AuthenticodeSeptember 16, 20132 min readPKI & Certificates Engineering & Code
How to generate and send an RFC3161 timestamp with OpenSSL and curlSeptember 16, 20131 min readPKI & Certificates Engineering & Code
Windows Certificate Enrollment ProtocolsJuly 8, 20131 min readPKI & Certificates Engineering & Code
DCOM and your FirewallJuly 8, 20131 min readEngineering & Code Security Practice
How to redirect POST’s based on their Content-Type in NginxJuly 1, 20132 min readEngineering & Code
Deploying forward secrecy on RedHat, Centos or Fedora based systemsJune 30, 20133 min readPKI & Certificates Cryptography & Keys Engineering & Code
How to Build Your Own OpenSSLJune 30, 20131 min readEngineering & Code Cryptography & Keys
Example IIS SSL / TLS configurationJune 25, 20131 min readPKI & Certificates Engineering & Code
How to do a quick and dirty benchmark on a smart cardJune 12, 20132 min readIdentity & Authentication Engineering & Code
How to get the latest stable OpenSSL, Apache and NginxMay 31, 20132 min readEngineering & Code
Example Nginx SSL / TLS configurationMay 29, 20132 min readPKI & Certificates Engineering & Code
Why we built the Revocation ReportApril 15, 20134 min readPKI & Certificates Engineering & Code
Advanced Troubleshooting of Certificate Validation Related Problems on Windows Part 2March 8, 20133 min readPKI & Certificates Engineering & Code
Advanced Troubleshooting of Certificate Validation Related Problems on Windows Part 1March 7, 20132 min readPKI & Certificates Engineering & Code
How Facebook can avoid losing $100M in revenue when they switch to always-on SSLNovember 29, 20123 min readPKI & Certificates Engineering & Code
Making a Windows smartcard login certificate with OpenSSL.November 20, 20121 min readIdentity & Authentication PKI & Certificates Engineering & Code
Using CAPICOM on Windows x64November 18, 20121 min readEngineering & Code PKI & Certificates
Priming the OCSP cache in NginxNovember 15, 20121 min readPKI & Certificates Engineering & Code
A quick look at SSL performanceOctober 22, 20123 min readPKI & Certificates Engineering & Code
RESTful X509, CRL and OCSP to JSON web-serviceSeptember 21, 20124 min readPKI & Certificates Engineering & Code
Updated my script for Qualified Subordination testingAugust 16, 20121 min readPKI & Certificates Engineering & Code
Serving OCSP POST responses on a CDNJuly 13, 20122 min readPKI & Certificates Engineering & Code
How to seed the CryptoAPI URL cache with an OCSP responseJuly 2, 20122 min readPKI & Certificates Engineering & Code
CryptoAPI, Revocation checking, OCSP and the Unknown certStatusJuly 2, 20122 min readPKI & Certificates Engineering & Code
Serving OCSP on a CDNJune 30, 20121 min readPKI & Certificates Engineering & Code
Using Monitis to monitor OCSP and CRL performanceJune 28, 20121 min readPKI & Certificates Engineering & Code
Revocation repositories, IPv6 support, message size, and performanceJune 27, 20123 min readPKI & Certificates Engineering & Code
Setting HTTP headers with OpenSSL and the OCSP test clientJune 24, 20121 min readPKI & Certificates Engineering & Code
Measuring OCSP Responder Performance with PowershellJune 20, 20121 min readPKI & Certificates Engineering & Code
Redirecting HTTP to HTTPS in IISJune 15, 20122 min readEngineering & Code PKI & Certificates
Redirecting HTTP to HTTPS in ApacheJune 14, 20121 min readEngineering & Code PKI & Certificates
Testing OCSP StaplingJune 13, 20121 min readPKI & Certificates Engineering & Code
OCSP Stapling in IISJune 12, 20121 min readPKI & Certificates Engineering & Code
OCSP Stapling in ApacheJune 12, 20122 min readPKI & Certificates Engineering & Code
OCSP Responder Performance Needs ImprovementMarch 22, 20122 min readPKI & Certificates Engineering & Code
How to do OCSP requests using OpenSSL and CURLMarch 20, 20121 min readPKI & Certificates Engineering & Code
Using OpenSSL to create a test Qualified Subordination PKI hierarchyMarch 3, 20121 min readPKI & Certificates Engineering & Code
How to clear the CryptNet cache in Windows 7August 31, 20112 min readPKI & Certificates Engineering & Code
How to clear the IE SSL Cache from JSAugust 28, 20071 min readPKI & Certificates Engineering & Code