Nginx Proxy Manager with Docker: Proxy Hosts and Free SSL
Once you run more than one self-hosted app, you hit the same problem every time. Each app wants its own port, and none of them has HTTPS. Nginx Prox…
Latest Web news from Tech News
All topics
AI
agents
ai
api
architecture
automation
backend
beginners
career
database
devchallenge
devops
discuss
javascript
linux
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
Production outage lessons: we blamed our code. It was SSL.
Building a product is one job. Keeping it alive is a completely different job. Nobody warns you about the second one. Or they do, and you don't list…
Let's Encrypt cuts certificate lifetimes to 64 days starting February 2027
Free SSL/TLS certificate lifetimes reduce to 64 days in February.
cert-manager-webhook-freens: сертификаты Let's Encrypt на все поддомены в Kubernetes через бесплатный российский DNS
Казалось бы, что там может быть интересного — A-запись прописал и забыл. Ан нет: стоило захотеть один сертификат сразу на все тестовые поддомены и п…
How to Decode & Inspect X.509 SSL Certificates and CSRs Without OpenSSL (or Leaking Data to Unknown Servers)
A few months back, I was helping migrate an internal API gateway to a fresh Kubernetes cluster. It was late on a Friday afternoon. We generated a ne…
[Перевод] Как я факторизовал RSA‑ключи центра сертификации… из 90-х
В последнее время меня всерьез стала беспокоить безопасность RSA. Криптография RSA держится на сложности факторизации большого полупростог…
Setting Up Nginx Ingress Controller with SSL on Kubernetes
The Nginx Ingress Controller is a popular Kubernetes Ingress controller that uses Nginx as a reverse proxy and load balancer to route external traff…
Как получить OV-сертификат Минцифры для HTTPS в 2026 году
Как получить бесплатный HTTPS сертификат от Минцифры для своего сайта на 365 дней. Смотрим, с какими сложностями предстоит столкнуться. Читать далее
issued.live: Certificate Transparency, ICANN Registrations and DNS in One API
Every certificate issued for every domain on the public internet gets written to a public log. Anyone can read them. Almost nobody does — because th…
Someone Can Get an SSL Certificate for Your Domain. CT Logs Are How You Find Out.
Here is a failure your monitoring is built to miss. Somebody — an attacker who briefly controlled your DNS, a subdomain you forgot you delegated, an…
NET::ERR_CERT_AUTHORITY_INVALID: When the Root Itself Is Not Trusted
The hostname matches. The chain is complete — every intermediate is present, each certificate signs the next, and it all leads up to a single certif…
Влияние TLS-библиотек и настроек на производительность
Тонкая настройка TLS необходима для современного веб‑сервера, обратного прокси или балансировщика с терминацией TLS. При этом те…
Работа с ГОСТ TLS в реальных проектах: костыли, решения и опыт
Привет, Хабр! Меня зовут Максим Теплых, эксперт по тестированию на проникновение в ИТ-компании Innostage. В этой статье я хочу рассмотреть тему, кот…
Confused by DV, OV, and EV SSL Certificates? This Article Will Clear It All Up
First, Let's Clarify What SSL Certificates Actually Do Before diving into DV/OV/EV, let's quickly run through the basics of SSL certificates. An SSL…
HTTP-01, DNS-01, and DNS Delegation: What's the Difference When Getting an SSL Certificate?
First-timers applying for an SSL certificate almost always get stuck at this step — picking a validation method. The UI shows HTTP-01, DNS-01, and s…
What's the Difference Between Free and Paid SSL Certificates — and Why Do Prices Vary So Much?
When people first encounter SSL certificates, they often ask the same question: If a free SSL certificate can already make a website HTTPS and brows…
gost-curl — консольный HTTP-клиент с поддержкой ГОСТ TLS 1.3
Недавно мне понадобился консольный HTTP-клиент для отладки сайта, который закрыт TLS 1.3 на ГОСТ-алгоритмах. Из доступных средств почти не было вари…
CSR для SSL: разбор частых ошибок в SAN и wildcard
Большинство проблем с SSL-сертификатами возникает не при настройке TLS, а на этапе создания CSR: забытые SAN-домены, неправильные ожидания от wildca…
TLS Is Easy to Enable and Hard to Get Right
Enabling TLS is a solved problem. Get a certificate from Let's Encrypt, point your server at it, done. What's not solved is the configuration that c…
Guide to Automatic SSL Certificate Renewal for Nginx and Docker
Not long ago, when the certificate for the hesapciyiz.com site I host on my own VPS expired, I woke up to an email in the middle of the night. Yes,…
Why Subject Alternative Names (SANs) Matter for Modern Browsers
Originally published on cert-depot.com . Free, open-source self-signed certificate generator — no signup, keys never stored. Why Subject Alternative…