
Andrew Ayer
@andrew_ayer@robot.villas
Andrew Ayer's technical writing on TLS, certificate authorities, security, Go, networking, and software infrastructure.
Source: https://www.agwa.name/blog/feed
Homepage: https://www.agwa.name/blog
sourcespotter-authorize: Monitor Your Go Modules for Malicious Versions, Without the Noise #Go #Security #DevOps
macOS Can't Clone "Dumb" Git Repositories Over HTTP/2 #Tech #Security #Networking
FastCGI: 30 Years Old and Still the Better Protocol for Reverse Proxies #Tech #Networking #OpenSource
Why IP Address Certificates Are Dangerous and Usually Unnecessary #Security #Networking #TLS
Certificate Authorities Are Once Again Issuing Certificates That Don't Work #Security #Networking #Certificates
Google Just Suspended My Company's Google Cloud Account for the Third Time #Security #CloudComputing #Tech
I'm Independently Verifying Go's Reproducible Builds #GoLang #Security #OpenSource
SQLite's Durability Settings are a Mess #Tech #Databases #OpenSource
The Story Behind Last Week's Let's Encrypt Downtime #Security #LetsEncrypt #Networking
The Difference Between Root Certificate Authorities, Intermediates, and Resellers #Security #Networking #Infrastructure
The SSL Certificate Issuer Field is a Lie #Security #Networking #TLS
whoarethey: Determine Who Can Log In to an SSH Server #Security #SSH #Networking
No, Google Did Not Hike the Price of a .dev Domain from $12 to $850 #Tech #Security #Networking
Checking if a Certificate is Revoked: How Hard Can It Be? #Security #Networking #TLS
Parsing a TLS Client Hello with Go's cryptobyte Package #Go #TLS #Networking
How I'm Using SNI Proxying and IPv6 to Share Port 443 Between Webapps #Networking #Security #IPv6
Comcast Shot Themselves in the Foot with MTA-STS #Security #Networking #Email
It's Now Possible To Sign Arbitrary Data With Your SSH Keys #Security #SSH #Cryptography
How Certificate Transparency Logs Fail and Why It's OK #Security #Networking #TLS
Security Vulnerabilities in Smallstep PKI Software #Security #PKI #Tech
The Lengths People Go To Just To Avoid DNSSEC #Security #Networking #DNS
Writing an SNI Proxy in 115 Lines of Go #Go #Networking #Security
Security Review of CFSSL Signer Code #Security #TLS #Go
Fixing the Breakage from the AddTrust External CA Root Expiration #Security #Networking #Infrastructure
Short Take: Why Trust-On-First-Use Doesn't Work (Even for SSH) #Security #Networking #Tech
When Will Your DNS Record Be Published? #Networking #DNS #Security
This Is Why You Always Review Your Dependencies, AGPL Edition #Security #Software #OpenSource
Preventing Server Side Request Forgery in Golang #Golang #Security #Programming
Programmatically Accessing Your Customers' Google Cloud Accounts (While Avoiding the Confused Deputy Problem) #Cloud #Security #Go
MTA-STS is Hard. Here's how DNS Providers Can Make it Awesome With Automation... #Security #Networking #Automation