tls
Safeguard articles tagged "tls" — guides, analysis, and best practices for software supply chain and application security.
36 articles
CVE-2023-34462: The Netty SniHandler Memory Exhaustion Flaw
CVE-2023-34462 lets a crafted TLS ClientHello force Netty's SniHandler to allocate up to 16MB per connection, opening a denial-of-service path. Here is the root cause, affected versions, and the fix.
Securing Nginx on AWS: The Webinar-Grade Hardening Checklist
Running Nginx on AWS pairs two of the most common infrastructure choices, and this is the hardening walkthrough we would give in a live AWS Nginx webinar.
Kubernetes Ingress TLS: Setup, Certificates, and Common Mistakes
How Ingress TLS works in Kubernetes: terminating HTTPS at the ingress, wiring TLS secrets, automating certificates with cert-manager, and the mistakes that break it.
Python SSL: How to Verify TLS Certificates the Right Way
The Python ssl module gives you safe defaults for free, but only if you use them. Here is how to set up certificate verification correctly and avoid the mistakes that quietly disable it.
netty-handler: TLS in Netty and Keeping It Patched
netty-handler is where Netty's TLS lives, which makes it the module scanners flag most. What SslHandler actually does, the hostname-verification gotcha, and the patch cadence to keep.
X.509 Certificates in .NET: System.Security.Cryptography Explained
A practitioner's tour of System.Security.Cryptography.X509Certificates: loading certs safely on modern .NET, chain validation, stores, and the mistakes that quietly disable TLS security.
VS Code Proxy Settings: How to Configure and Secure Them
How to configure VS Code proxy settings for corporate networks, the difference between http.proxy and environment variables, and the security pitfalls to avoid.
What Is a Certificate Authority? The Root of Digital Trust
A certificate authority is the trusted third party that vouches for who owns a public key. It is the reason your browser can trust a website it has never seen before.
An Asymmetric Encryption Example, Explained for Developers
A concrete asymmetric encryption example using RSA key pairs, plus how public-key cryptography secures TLS, signing, and the code you ship.
What Is Mutual TLS (mTLS)? Two-Way Authentication Explained
Mutual TLS makes both sides of a connection prove their identity with certificates, not just the server. It is the backbone of zero-trust communication between services.
What Is TLS? Transport Layer Security Explained
TLS is the protocol that encrypts data in transit across the internet, turning the padlock in your browser into real protection against eavesdropping and tampering.
OpenSSL vs LibreSSL vs BoringSSL in 2026
A 2026 comparison of OpenSSL, LibreSSL, and BoringSSL on security posture, release cadence, FIPS posture, and which one to ship in which context.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.