Security

A practical breakdown of the most common misconceptions about /dev/urandom and /dev/random on Linux, explaining why /dev/urandom is the correct choice for cryptographic randomness and why blocking on low entropy is a usability problem, not a security one.

A comprehensive reference table of common LDAP object identifiers (OIDs) used in schema elements, controls, and extended operations. Each entry includes the OID, its purpose, and a link to the relevant RFC or specification.

Multiple Content-Security-Policy headers do not combine; the most restrictive one always wins. Learn how to correctly configure CSP in nginx by consolidating directives into a single header.

A plain-English walkthrough of how SAML authentication works, using the analogy of buying a beer at a concert. Covers IdP and SP configuration, IdP-initiated vs SP-initiated flows, and practical troubleshooting steps.

A byte-by-byte walkthrough of a TLS 1.3 handshake using OpenSSL’s s_client, comparing each message to its TLS 1.2 counterpart. Highlights how encryption, key exchange, and extensions differ in the latest revision.

Learn how to use Decryption Policy rules in Palo Alto Networks to define which traffic to decrypt and which to exclude. This guide also covers best practices for blocking QUIC and applying strict security profiles to sensitive traffic categories.