security

How to install Yubico Authenticator app on RHEL 9

Little feedback about hardening git requiring your physical security key (Yubikey & co) using ed25519-sk.

Why and How migrating from a Cloud seal to Shamir seal

Azure App Services Web Apps Configuraton, external versioning solution… KISS way

When enforcing policy on Key Vault, we need to set expiration on secret. This is the quick way to do it

Azure WAF custom rule to allow Active Directory OpenID Connect

Containers on macOS with Podman

Bitel drops DNS traffic to other servers than their owns. This is the way to to bypass this attack on net neutrality and security.

Do you respect your users? Do you want the best security for them? In that case, you must use server-side sessions.

I explain why I don’t use Vault from upstream for dev/pre-prod/prod environment. It’s about security.

My public TLS configuration for nginx and I hardened a little: removing a lot of ciphers and LUCKY13 vuln. Now, you’ve a true TLS config for your nginx.

We’ll see how it’s possible to do mutual TLS (mTLS) with nginx and force your users to pass through CloudFlare WAF and reject all direct connections.

Petit point concernant Intel et AMD