Security

Why TLS Certificates Are Shrinking to 47 Days

Why TLS Certificates Are Shrinking to 47 Days

Today I was renewing one of my DigiCert TLS certificates, something I’ve done countless times before without really thinking much about it. Just another routine task sitting in the middle of emails, deployments, dashboards, and all the usual infrastructure work. But this time, something felt off. After the certificate was issued, I glanced at the expiration date and immediately noticed the validity period looked shorter than usual. At first I assumed I misread it, or maybe selected the wrong …
HTTP Security Headers Guide: What to Fix First

HTTP Security Headers Guide: What to Fix First

If you are running a security headers check with SecurityHeaders.com, the biggest mistake is trying to fix everything at once. A better approach is to review each HTTP Security Header, separate the easy wins from the risky changes and then fix the headers in the right order. For this draft, we use the sample SecurityHeaders.com report for this website. Site: https://potato.id/ IP Address: 172.67.219.34 Report Time: 22 Apr 2026 16:50:39 UTC Headers: - Referrer-Policy - Content-Security-Policy - …
How to Improve Your Qualys SSL Server Test Score and Get A+ in SSL Labs

How to Improve Your Qualys SSL Server Test Score and Get A+ in SSL Labs

If you are trying to understand how to improve your Qualys SSL Server Test score, you are in the right place. Qualys SSL Server Test, often referred to as SSL Labs, is one of the most widely used public tools for checking how well a website is configured for HTTPS and TLS. A lot of admins care about getting an A or A+ because it is an easy, visible way to validate that their SSL/TLS setup is modern, secure, and free from obvious mistakes.
Dynamic IP Denylisting with NGINX Plus and fail2ban

Dynamic IP Denylisting with NGINX Plus and fail2ban

This article is based on the original NGINX blog post by Liam Crilly of F5, published September 19, 2017. You may not realize it, but your website is under constant threat. If it’s running WordPress, bots are trying to spam you. If it has a login page, there are brute-force password attacks. You may also consider search engine spiders as unwanted visitors. Defending your site from unwanted, suspicious, and malicious activity is no easy task. Web application firewalls are effective tools …