0 views collected around this technical thread.
This guide explains what mkcert is, its key features, and provides step‑by‑step instructions for installing the tool, generating trusted local SSL/TLS certificates for multiple domains and IPs, and configuring Nginx to enable HTTPS in a local development environment across Windows, macOS, and Linux.
This guide walks you through securing the Longhorn UI in a Kubernetes environment by configuring basic authentication and enabling HTTPS via Ingress and cert‑manager, including prerequisite setup, secret creation, Helm upgrades, and verification steps to ensure production‑grade protection.
This article explains why encrypting data transmission is essential, and demonstrates three PHP-based methods—using HTTPS, symmetric encryption (e.g., AES), and asymmetric encryption with OpenSSL—to protect communication, along with sample code and key management tips.
This guide explains why browsers show “not secure” warnings, why self‑signed certificates are a cost‑effective solution for small‑to‑medium businesses, and provides step‑by‑step instructions—including MMC configuration and certificate import—to remove those warnings without purchasing commercial SSL certificates.
This article explains why encrypting data transmission is essential, introduces HTTPS, demonstrates how to apply symmetric encryption algorithms like AES in PHP, and shows how to use PHP's OpenSSL extension for asymmetric encryption, providing practical code examples and key‑management tips.
This article explains the fundamentals of JSON Web Tokens (JWT), compares token‑based authentication with traditional session authentication, outlines common token security threats such as theft, replay, and forgery, and presents practical mitigation measures including HTTPS, encryption, secure storage, short expiration, MFA, and safe token refresh mechanisms.
This article introduces the open‑source mkcert tool for effortlessly creating locally trusted SSL/TLS certificates, provides step‑by‑step installation and usage commands for multiple platforms, shows how to configure Nginx with the generated files, and then promotes related AI and ChatGPT community offers and paid resources.
This guide shows how to rewrite Nginx port 80 requests to HTTPS on port 443, configure the HTTPS server block, and set up an IP whitelist with allow and deny directives to restrict access to specific clients.
This article examines essential security measures for PHP applications, covering protection against SQL injection, XSS, CSRF, unsafe file uploads, session fixation, weak passwords, error disclosure, and the importance of HTTPS, with practical code examples and configuration tips to build more resilient web services.
This article explains how to secure PHP data transmission using HTTPS, symmetric encryption (AES, DES, 3DES) and asymmetric encryption with OpenSSL, providing code examples and key management advice to protect confidentiality, integrity, and prevent man‑in‑the‑middle attacks.
This article provides a detailed tutorial on cURL, covering its basic usage, key options for HTTP and HTTPS requests, file upload and download techniques, and common troubleshooting tips to help developers efficiently interact with web services from the command line.
This article introduces the open‑source tool mkcert, explains its key features, provides step‑by‑step installation and certificate generation commands, shows how to configure Nginx for HTTPS, and includes promotional notes about related community resources.
Enterprises should follow a six‑phase plan—inventorying domains, securing and installing SSL certificates, configuring servers, redirecting traffic, updating links and sitemaps, testing, and finally enforcing HTTPS‑only access—while monitoring performance impacts such as latency, bandwidth, CPU load, and handshake overhead.
This article outlines essential Laravel security practices, including built‑in authentication, CSRF protection, input validation, HTTPS enforcement, secure session handling, regular dependency updates, and rate limiting, providing developers with concrete steps to protect web applications from common attacks.
This article introduces the open‑source tool mkcert, explains its features, shows how to install it on various operating systems, generate multi‑domain certificates, and configure Nginx for HTTPS, while also noting additional community resources and promotional offers.
After discovering that a simple GET request consumes 1.68 KB due to the TLS handshake, the article explains the handshake’s components, calculates the resulting bandwidth demand, and demonstrates how switching to HTTP or enabling Keep‑Alive can dramatically reduce traffic and server load in high‑concurrency scenarios.
This article provides a step‑by‑step analysis of a TLS 1.2 HTTPS handshake captured with Wireshark, explaining the ClientHello, ServerHello, certificate parsing, key‑exchange messages, master secret derivation, and the final encrypted application data exchange.
The article analyzes why a high‑concurrency data‑collection service quickly saturates a 100 Mbps uplink due to large TLS handshake payloads, demonstrates the bandwidth savings of switching to plain HTTP or using Keep‑Alive, and highlights practical considerations for secure versus performance‑optimized deployments.
The article uses a classroom love‑note scenario to illustrate how single‑key (symmetric) and double‑key (asymmetric) locks model modern cryptographic techniques, explaining key exchange, signatures, man‑in‑the‑middle attacks, and how HTTPS secures communication.
Learn how to configure Ingress‑Nginx in a running Kubernetes cluster for secure mTLS and HTTPS communication, covering prerequisites, certificate creation, deployment of HTTP and mTLS services, Ingress rules, SSL passthrough setup, and verification steps with practical kubectl and OpenSSL commands.