home
|
feeds
|
donate
Log in / sign up
Andrew Ayer - Blog
follow
fastcgi: 30 years old and still the better protocol for reverse proxies
Andrew Ayer - Blog
-
Apr 29
hide
why ip address certificates are dangerous and usually unnecessary
Andrew Ayer - Blog
-
Feb 19
hide
certificate authorities are once again issuing certificates that don't work
Andrew Ayer - Blog
-
Dec 10 2025
hide
google just suspended my company's google cloud account for the third time
Andrew Ayer - Blog
-
Nov 03 2025
hide
i'm independently verifying go's reproducible builds
Andrew Ayer - Blog
-
Oct 29 2025
hide
sqlite's durability settings are a mess
Andrew Ayer - Blog
-
Aug 29 2025
hide
the story behind last week's let's encrypt downtime
Andrew Ayer - Blog
-
Jun 22 2023
hide
the difference between root certificate authorities, intermediates, and resellers
Andrew Ayer - Blog
-
Jun 18 2023
hide
the ssl certificate issuer field is a lie
Andrew Ayer - Blog
-
Jan 18 2023
hide
whoarethey: determine who can log in to an ssh server
Andrew Ayer - Blog
-
Jan 10 2023
hide
no, google did not hike the price of a .dev domain from $12 to $850
Andrew Ayer - Blog
-
Dec 12 2022
hide
checking if a certificate is revoked: how hard can it be?
Andrew Ayer - Blog
-
Dec 01 2022
hide
parsing a tls client hello with go's cryptobyte package
Andrew Ayer - Blog
-
May 18 2022
hide
how i'm using sni proxying and ipv6 to share port 443 between webapps
Andrew Ayer - Blog
-
Apr 15 2022
hide
comcast shot themselves in the foot with mta-sts
Andrew Ayer - Blog
-
Jan 19 2022
hide
it's now possible to sign arbitrary data with your ssh keys
Andrew Ayer - Blog
-
Nov 12 2021
hide
how certificate transparency logs fail and why it's ok
Andrew Ayer - Blog
-
Jul 09 2021
hide
security vulnerabilities in smallstep pki software
Andrew Ayer - Blog
-
Dec 17 2020
hide
the lengths people go to just to avoid dnssec
Andrew Ayer - Blog
-
Nov 30 2020
hide
writing an sni proxy in 115 lines of go
Andrew Ayer - Blog
-
Jun 25 2020
hide
security review of cfssl signer code
Andrew Ayer - Blog
-
Jun 18 2020
hide
fixing the breakage from the addtrust external ca root expiration
Andrew Ayer - Blog
-
May 30 2020
hide
short take: why trust-on-first-use doesn't work (even for ssh)
Andrew Ayer - Blog
-
Feb 08 2020
hide
when will your dns record be published?
Andrew Ayer - Blog
-
Feb 03 2020
hide
this is why you always review your dependencies, agpl edition
Andrew Ayer - Blog
-
Jan 04 2020
hide
preventing server side request forgery in golang
Andrew Ayer - Blog
-
Dec 20 2019
hide
programmatically accessing your customers' google cloud accounts (while avoiding the confused deputy problem)
Andrew Ayer - Blog
-
Dec 03 2019
hide
mta-sts is hard. here's how dns providers can make it awesome with automation...
Andrew Ayer - Blog
-
Apr 15 2019
hide
making certificates easier and helping the ecosystem: four years of sslmate
Andrew Ayer - Blog
-
Apr 13 2018
hide
these three companies are doing the internet a solid by running certificate transparency logs
Andrew Ayer - Blog
-
Mar 29 2018
hide