The limits are generous for a production site and easy to exhaust from a staging environment, because they count against the registered domain rather than the hostname —…
Free certificates went GA this month. Automating issuance and renewal, the rate limits that catch staging first, and the monitoring that has to outlive the automation.
A week-old server already sees thousands of login attempts a day. Key-only SSH, a firewall, fail2ban and monit — and the recovery plan for locking yourself out.
A certificate is bought once, installed once, and the diary entry belongs to whoever did it — which survives about as long as their current job. Two years…
PHP’s encrypted stream wrappers did not verify certificates. file_get_contents(‘https://…’) on 5.5 opened the connection, negotiated TLS and never checked who was on the other end, which made every…
A query answering in 20 ms locally and timing out on four million rows. An anonymised data subset that keeps the query plan honest, and the mail, cron…
The OpenSSL bug published on 7 April lets a remote client read 64KB of the server process’s memory per request, repeatedly, leaving nothing in any log. Upgrading the…