Nginx tuning tips to help improve the performance of Nginx w/ HTTPS for better TTFB and reduced latency. Includes HTTP/2, session cache, HSTS, OCSP stapling

Certificates and public key infrastructure (PKI) are hard. No shit, right? I know a lot of smart people who''ve avoided this particular rabbit hole. Eventually, I was forced to learn this stuff because of what it enables: PKI lets you define a system cr…

Исключительно простой и быстрый способ собрать себе SSL CA

Every byte of a TLS connection explained and reproduced

An up to date version of this article is available at: https://hackernoon.com/how-properly-configure-nginx-server-for-tls-sg1d3udt. This…

Provides a brief introduction to mutual SSL authentication and its handshake messages

Pop quiz: where is OpenSSL's default store of trusted CA certificate files?

/etc/ssl/certs
/etc/pki/tls/certs/ca-bundle.crt
/etc/ssl/certs/ca-bundle.crt
/etc/pki/tls/certs/ca-bundle.trust.crt
/etc/pk

Мне кажется, что в сети нет более полного описания TLS на русском языке. Местами расписано до отдельных байт. И что радует отдельно - это не переводная калька с забугорных ресурсов, а самописный и поддерживаемый в актуальном виде документ. Есть даже описание…

Convinced from spending hours reading rave reviews, Bob eagerly clicked “Proceed to Checkout” for his gallon of Tuscan Whole Milk and…