Alpine uses musl rather than glibc, and musl’s resolver queries all configured nameservers in parallel and takes the first answer — which behaves differently from glibc under partial…
Without stapling, a browser checking whether your certificate is revoked makes its own request to the CA — adding latency, and telling the CA which sites that user…
The header is one line. The work is finding out what it will break — which means report-only for weeks, and reading violations that are mostly not your…
1.3 was finalised in August, and its cipher suites are configured separately from 1.2’s — so a hardened ssl_ciphers line copied from a 2016 guide silently governs only…
Apache, Nginx, PHP, MySQL, Redis, Beanstalkd and a mail catcher, on a laptop. Onboarding measured in minutes rather than days, and what it costs to run.
The front-controller pattern gets written as a rewrite with a regular expression roughly as often as it gets written correctly, and try_files expresses the same intent as a…
nginx defaults to a one megabyte request body and rejects anything larger with a 413 before PHP is involved, so every PHP upload setting in the world makes…