Bedrock, −24 to −40 m NAP
Security
Not glamorous. Everything above it rests on it anyway.
What two SOC 2 cycles taught me about security engineering
Compliance frameworks are mostly about proving you do what you say. Here's how to make that cheap.
Your DNS ad blocker is a man in the middle you invited
DNS-level ad blocking with public blocklists is great, until you realise you've given strangers the power to rewrite where your traffic goes.
Internal apps deserve real certificates too
Stop installing private root CAs on every device. With Let's Encrypt DNS validation, internal apps get publicly trusted certificates without ever being reachable from the internet.