Andrew Ayer - Blog agwa.name

Security Review of CFSSL Signer Code

agwa.name·308w

Fixing the Breakage from the AddTrust External CA Root Expiration

agwa.name·311w

Short Take: Why Trust-On-First-Use Doesn't Work (Even for SSH)

agwa.name·327w

When Will Your DNS Record Be Published?

agwa.name·328w

This Is Why You Always Review Your Dependencies, AGPL Edition

agwa.name·332w

Preventing Server Side Request Forgery in Golang

agwa.name·334w

Programmatically Accessing Your Customers' Google Cloud Accounts (While Avoiding the Confused Deputy Problem)

agwa.name·336w

MTA-STS is Hard. Here's how DNS Providers Can Make it Awesome With Automation...

agwa.name·370w

Making Certificates Easier and Helping the Ecosystem: Four Years of SSLMate

agwa.name·422w

These Three Companies Are Doing the Internet a Solid By Running Certificate Transparency Logs

agwa.name·424w

Google's Certificate Revocation Server Is Down - What Does It Mean?

agwa.name·434w

How will Certificate Transparency Logs be Audited in Practice?

agwa.name·435w

Why Man-in-the-Middle Detection is Overrated

agwa.name·450w

Thoughts on the Systemd Root Exploit

agwa.name·485w

Systemd is not Magic Security Dust

agwa.name·502w

How to Crash Systemd in One Tweet

agwa.name·502w

Log in to enable infinite scrolling