Cybersecurity articles covering SSL certificates, HTTP security headers, password safety, data breaches and auditing your own site.
Need HTTPS for localhost or an internal service? Here is how to generate a self-signed SSL certificate in seconds — online, with OpenSSL or with mkcert for local development.
JAY
HTTP security headers are the fastest way to significantly improve your website's security posture. Here is what each header does, what grade it affects and
JAY
A CSR looks like random text — but inside is critical information: domain, organisation, key algorithm, key size and subject alternative names. The CSR…
JAY
Every SSL certificate starts with a Certificate Signing Request. Before your Certificate Authority can issue a certificate, you need to generate a CSR that contains your domain name, organisation deta
JAY
Managing SSL certificates is one of the most error-prone tasks in web development. A mismatched private key, a CSR with the wrong Common Name, or an expired certificate in the wrong format can take a
JAY
Before you can get an SSL certificate from a Certificate Authority, you need to generate a Certificate Signing Request (CSR). The CSR is a block of encoded text containing your domain name, organisati
JAY
Managing SSL certificates is one of those tasks that looks simple until something goes wrong. An expired certificate takes your site offline. A mismatched private key stops your server from starting.
JAY
Email spoofing is one of the oldest phishing techniques. An attacker sends email appearing to come from your domain to scam your customers. Three DNS records prevent this: SPF, DMARC and DKIM. The SPF
JAY
Most websites are missing critical security headers. A recent survey found that over 80% of websites on the internet fail to set a Content-Security-Policy header, and more than half have no Strict-Tra
JAY