QPQuang Phaninquangphan.hashnode.dev·May 14 · 4 min readWhat is Cipher Suites?When a client makes a web or API request to a server, modern security standards require the use of TLS (Transport Layer Security) — a cryptographic protocol that provides confidentiality, integrity, a00
QPQuang Phaninquangphan.hashnode.dev·Jan 30 · 3 min readMocking ASP.NET MVC's ExceptionContext - aka How to mock global exception filter.The Challenge Recently at work, I implemented a global exception filter using ASP.NET MVC (System.Web.Mvc) that implements IExceptionFilter to capture and handle any uncaught exceptions. I'm a big fan of this approach for APIs because it allows excep...00
QPQuang Phaninquangphan.hashnode.dev·Nov 14, 2025 · 4 min readChoosing Between IEnumerable<T> and IReadOnlyCollection<T> in GET endpointsI recently caught myself mindlessly implementing a GET API endpoint that returned an IEnumerable<T>. I've also seen this pattern repeated in many API implementations across different services. While it works, I want to walk through why using IReadOnl...00
QPQuang Phaninquangphan.hashnode.dev·Jun 6, 2025 · 9 min readCreate Self-Singed Certificate with trusted chain.Most of us have created a single self-signed certificate to test SSL/TLS solutions in our local environment. However, I’d like to focus on creating a self-signed certificate with a trusted chain, as this more closely reflects the type of certificate ...00
QPQuang Phaninquangphan.hashnode.dev·May 28, 2025 · 7 min readSelf-Signed Certificate usage on Local DevelopmentMost of the time, when developing an application on our local machine, we use only HTTP traffic to simplify development and focus on application logic. However, there are important scenarios where enabling encrypted traffic locally becomes necessary....00
