AAbdus Salam·4d agoThe Node.js TLS Bug That Broke Certificate Checks — and How to Tell If You're AffectedA critical TLS certificate-validation vulnerability was disclosed in Node.js 24.x and 26.x, tracked as CVE-2026-105483. It is the kind of bug that sounds abstract until you translate it: under certain5 min read·aheadkit.hashnode.dev6C
VVictor Okoroafor·5d agoEncrypted Is Not Authenticated: What PostgreSQL sslmode Really ChecksWhy transport encryption alone won’t protect you from a rogue server, and the one sslmode that does, tested in a reproducible Docker lab.17 min read·victorokoroafor.hashnode.dev
JJaden Vo·5d agoCheck TLS Certificate Expiry in CI with Python (ssl + socket) and Fail the Build Within N DaysA tested stdlib checker that reads notAfter from any host, warns when a cert expires soon, and returns exit code 1 so GitHub Actions or a cron job can catch it before users do8 min read·jadenvo259.hashnode.dev1E
Uupordown.online·Oct 31How to check when an SSL certificate expires (and catch it early)An expired certificate takes a site down as completely as a crashed server: browsers show a full-page warning and most visitors leave. The fix takes minutes, but only if you notice before the date pas4 min read·upordownonline.hashnode.dev
YYilia Lin·Oct 29TLS Key Exchange for API Gateway Origins: Cut Handshake Retries SafelyBy Yilia Lin. Originally published on API7.ai. Disclosure: This syndicated edition was prepared with AI assistance. TLS latency is not only a client-to-edge concern. An API gateway also acts as a TLS8 min read·api7.hashnode.dev1C
ZZyVOP·Oct 27SSL, TLS, and HTTPS Explained: What the Padlock Actually MeansA plain-English guide to SSL, TLS, and HTTPS: how they differ, how a secure connection is built, and what the padlock does and doesn’t tell you.11 min read·blog.zyvop.com
DDionisio Cortés Fernández·Oct 25Eight CA Keys Between 1 and 255: What the eMudhra Incident Means for Your CodeEight eMudhra CA keys were integers below 256. Why your backend's TLS clients may still trust them, and how to fix Java, Go, Node.js and Python.30 min read·blog.dionisioc.dev
JJanith Jayasinghe·Oct 25How to Configure SSL/HTTPS in Oracle WebLogic Server 12.2.1.4Step-by-step guide to enabling HTTPS in WebLogic 12.2.1.4 using Java keystores, CA-signed certificates, CSR generation, and SSL configuration.15 min read·oracletechinsights.hashnode.dev
RRONI DAS·Oct 22A certificate authority's private key was the number 4. We checked.Eight eMudhra intermediate CA keys were generated wrongly. We recovered six of them from the public certificates in under a quarter of a second each. Browsers are protected; a lot of other software is not, and the reason is how certificate trust actu7 min read·systemdesignacademy.hashnode.dev
BBookMyHost·Oct 14Works on desktop, fails on phones: the post-quantum TLS bug hiding in your network cardModern browsers now send a larger TLS hello. On some Windows servers, a receive-offload bug in the network card silently breaks about half of those connections. Here is how to spot it, why it happens,4 min read·bookmyhost.hashnode.dev
