Free Post HTTPS Debunking the fallacy that paid certificates are better than free certificates, and other related nonsense Those that know me or have followed me online will know I'm a massive advocate of encryption on the web. One of my goals is to help encrypt...
Free Post Security Headers When crawlers are hungry for porn... I had a bit of a strange issue on Security Headers this week and at first I thought it was someone trolling me. Turns out it wasn't someone...
Free Post HTTPS Do SSL warranties protect you? As much as rocks keep tigers away... This post is the first of two that I will be publishing over the coming days to address a few concerns that seem to be rising in the wider community....
Free Post Security Headers Alexa Top 1 Million Analysis - February 2018 It's that time of year again! I'm really excited to publish the 6th installment of my Alexa Top 1 Million analysis so we can take a...
Free Post HTTPS Why we need to do more to reduce certificate lifetimes In the early days of the encrypted web you could get certificates valid for any period of time. Long gone are those days and as more time goes by we...
Free Post nissan leaf Analysing variations in EV efficiency This blog is a break from the normal security focus of articles I write but I do have other interests outside of security! I drive an Electric Vehicle and one...
Free Post PKI Are you ready for the Symantec distrust? It's been common knowledge in the wider PKI community that Symantec, the Certificate Authority, is currently being distrusted and will soon cease to exist as a CA. My...
Free Post CSP Protect your site from Cryptojacking with CSP + SRI We saw a pretty big event take place over the weekend where a 3rd party provider was compromised and their JS library was altered. The alteration introduced a crypto mining...
Free Post Report URI Hacking Azure Table Storage to do ORDER BY on Timestamp I recently wrote about a little hack we did with Azure Table Storage to give us functionality equivalent to a LIKE query in SQL, something not natively supported in Table...
Free Post Report URI Launching Report URI JS The most common way to set a Content Security Policy on your site is to deliver it as a HTTP response header, but that's not always possible. On...
