corpus.blog
41554 blogs · [ { "id": "01a0d50c-0898-7061-b8a6-81b1c8a54e2b", "title": "macOS Can't Clone \"Dumb\" Git Repositories Over HTTP/2", "url": "https://www.agwa.name/blog/post/macos_cant_clone_dumb_git_repos_over_http2", "published_at": "2026-09-24T13:01:31+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d087652c0d3", "title": "FastCGI: 30 Years Old and Still the Better Protocol for Reverse Proxies", "url": "https://www.agwa.name/blog/post/fastcgi_is_the_better_protocol_for_reverse_proxies", "published_at": "2026-04-29T15:55:13+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d08768ec04f", "title": "Why IP Address Certificates Are Dangerous and Usually Unnecessary", "url": "https://www.agwa.name/blog/post/ip_address_certs", "published_at": "2026-02-19T12:25:21+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d0876ce854a", "title": "Certificate Authorities Are Once Again Issuing Certificates That Don't Work", "url": "https://www.agwa.name/blog/post/cas_are_issuing_broken_certificates_again", "published_at": "2025-12-10T18:36:52+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d087726fea6", "title": "Google Just Suspended My Company's Google Cloud Account for the Third Time", "url": "https://www.agwa.name/blog/post/google_suspended_sslmates_cloud_account_again", "published_at": "2025-11-03T13:31:09+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d0877ca5c1e", "title": "I'm Independently Verifying Go's Reproducible Builds", "url": "https://www.agwa.name/blog/post/verifying_go_reproducible_builds", "published_at": "2025-10-29T16:59:43+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d0878a6a597", "title": "SQLite's Durability Settings are a Mess", "url": "https://www.agwa.name/blog/post/sqlite_durability", "published_at": "2025-08-29T16:45:33+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d08796b2e1f", "title": "The Story Behind Last Week's Let's Encrypt Downtime", "url": "https://www.agwa.name/blog/post/last_weeks_lets_encrypt_downtime", "published_at": "2023-06-22T14:18:52+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d0879becb89", "title": "The Difference Between Root Certificate Authorities, Intermediates, and Resellers", "url": "https://www.agwa.name/blog/post/roots_intermediates_and_resellers", "published_at": "2023-06-18T11:39:47+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d087a7f797e", "title": "The SSL Certificate Issuer Field is a Lie", "url": "https://www.agwa.name/blog/post/the_certificate_issuer_field_is_a_lie", "published_at": "2023-01-18T14:39:00+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d087ad41d1d", "title": "whoarethey: Determine Who Can Log In to an SSH Server", "url": "https://www.agwa.name/blog/post/whoarethey", "published_at": "2023-01-10T21:02:07+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d087b3bae73", "title": "No, Google Did Not Hike the Price of a .dev Domain from $12 to $850", "url": "https://www.agwa.name/blog/post/domain_pricing_is_very_confusing", "published_at": "2022-12-12T16:02:55+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d087c36f187", "title": "Checking if a Certificate is Revoked: How Hard Can It Be?", "url": "https://www.agwa.name/blog/post/checking_if_a_certificate_is_revoked_how_hard_can_it_be", "published_at": "2022-12-01T15:00:09+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d087d1407ec", "title": "Parsing a TLS Client Hello with Go's cryptobyte Package", "url": "https://www.agwa.name/blog/post/parsing_tls_client_hello_with_cryptobyte", "published_at": "2022-05-18T13:17:41+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d087dec89c8", "title": "How I'm Using SNI Proxying and IPv6 to Share Port 443 Between Webapps", "url": "https://www.agwa.name/blog/post/using_sni_proxying_and_ipv6_to_share_port_443", "published_at": "2022-04-15T12:06:05+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d087ec2c482", "title": "Comcast Shot Themselves in the Foot with MTA-STS", "url": "https://www.agwa.name/blog/post/comcast_shot_themselves_in_the_foot_with_mta-sts", "published_at": "2022-01-19T17:04:58+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d087f893850", "title": "It's Now Possible To Sign Arbitrary Data With Your SSH Keys", "url": "https://www.agwa.name/blog/post/ssh_signatures", "published_at": "2021-11-12T16:14:45+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d088060e549", "title": "How Certificate Transparency Logs Fail and Why It's OK", "url": "https://www.agwa.name/blog/post/how_ct_logs_fail", "published_at": "2021-07-09T19:06:16+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d088137cb6f", "title": "Security Vulnerabilities in Smallstep PKI Software", "url": "https://www.agwa.name/blog/post/security_vulnerabilities_in_smallstep", "published_at": "2020-12-17T18:11:03+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d08816a20ab", "title": "The Lengths People Go To Just To Avoid DNSSEC", "url": "https://www.agwa.name/blog/post/avoiding_dnssec", "published_at": "2020-11-30T17:31:06+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d0881e68897", "title": "Writing an SNI Proxy in 115 Lines of Go", "url": "https://www.agwa.name/blog/post/writing_an_sni_proxy_in_go", "published_at": "2020-06-25T14:35:55+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d0882a8d8c2", "title": "Security Review of CFSSL Signer Code", "url": "https://www.agwa.name/blog/post/security_review_of_cfssl_signer_code", "published_at": "2020-06-18T14:05:20+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d088349a985", "title": "Fixing the Breakage from the AddTrust External CA Root Expiration", "url": "https://www.agwa.name/blog/post/fixing_the_addtrust_root_expiration", "published_at": "2020-05-30T16:09:42+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d088388237d", "title": "Short Take: Why Trust-On-First-Use Doesn't Work (Even for SSH)", "url": "https://www.agwa.name/blog/post/why_tofu_doesnt_work", "published_at": "2020-02-08T16:08:08+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d0883bdfcdb", "title": "When Will Your DNS Record Be Published?", "url": "https://www.agwa.name/blog/post/when_will_your_dns_record_be_published", "published_at": "2020-02-03T14:00:00+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d088456cb5f", "title": "This Is Why You Always Review Your Dependencies, AGPL Edition", "url": "https://www.agwa.name/blog/post/always_review_your_dependencies", "published_at": "2020-01-04T18:47:04+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d0884c06f8f", "title": "Preventing Server Side Request Forgery in Golang", "url": "https://www.agwa.name/blog/post/preventing_server_side_request_forgery_in_golang", "published_at": "2019-12-20T03:00:12+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d0885ad7bd4", "title": "Programmatically Accessing Your Customers' Google Cloud Accounts (While Avoiding the Confused Deputy Problem)", "url": "https://www.agwa.name/blog/post/accessing_your_customers_google_cloud_accounts", "published_at": "2019-12-03T15:07:06+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d088691682a", "title": "MTA-STS is Hard. Here's how DNS Providers Can Make it Awesome With Automation...", "url": "https://www.agwa.name/blog/post/mta_sts_automation", "published_at": "2019-04-15T14:00:00+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d0887573da9", "title": "Making Certificates Easier and Helping the Ecosystem: Four Years of SSLMate", "url": "https://www.agwa.name/blog/post/four_years_of_sslmate", "published_at": "2018-04-13T18:06:02+00:00" }, { "id": "01a08c6b-8386-7119-b0c2-0d0888442264", "title": "These Three Companies Are Doing the Internet a Solid By Running Certificate Transparency Logs", "url": "https://www.agwa.name/blog/post/these_three_companies_are_doing_the_internet_a_solid", "published_at": "2018-03-29T16:36:23+00:00" } ] posts Claim your blog
Back to Blog - Andrew Ayer
Blog · corpus.blog/blogs/agwa.name/posts

Blog - Andrew Ayer

agwa.name

2026

macOS Can't Clone "Dumb" Git Repositories Over HTTP/2original ↗
24 Sept 2026
FastCGI: 30 Years Old and Still the Better Protocol for Reverse Proxiesoriginal ↗
29 Apr 2026
Why IP Address Certificates Are Dangerous and Usually Unnecessaryoriginal ↗
19 Feb 2026

2025

Certificate Authorities Are Once Again Issuing Certificates That Don't Workoriginal ↗
10 Dec 2025
Google Just Suspended My Company's Google Cloud Account for the Third Timeoriginal ↗
3 Nov 2025
I'm Independently Verifying Go's Reproducible Buildsoriginal ↗
29 Oct 2025
SQLite's Durability Settings are a Messoriginal ↗
29 Aug 2025

2023

The Story Behind Last Week's Let's Encrypt Downtimeoriginal ↗
22 Jun 2023
The Difference Between Root Certificate Authorities, Intermediates, and Resellersoriginal ↗
18 Jun 2023
The SSL Certificate Issuer Field is a Lieoriginal ↗
18 Jan 2023
whoarethey: Determine Who Can Log In to an SSH Serveroriginal ↗
10 Jan 2023

2022

No, Google Did Not Hike the Price of a .dev Domain from $12 to $850original ↗
12 Dec 2022
Checking if a Certificate is Revoked: How Hard Can It Be?original ↗
1 Dec 2022
Parsing a TLS Client Hello with Go's cryptobyte Packageoriginal ↗
18 May 2022
How I'm Using SNI Proxying and IPv6 to Share Port 443 Between Webappsoriginal ↗
15 Apr 2022
Comcast Shot Themselves in the Foot with MTA-STSoriginal ↗
19 Jan 2022

2021

It's Now Possible To Sign Arbitrary Data With Your SSH Keysoriginal ↗
12 Nov 2021
How Certificate Transparency Logs Fail and Why It's OKoriginal ↗
9 Jul 2021

2020

Security Vulnerabilities in Smallstep PKI Softwareoriginal ↗
17 Dec 2020
The Lengths People Go To Just To Avoid DNSSECoriginal ↗
30 Nov 2020
Writing an SNI Proxy in 115 Lines of Gooriginal ↗
25 Jun 2020
Security Review of CFSSL Signer Codeoriginal ↗
18 Jun 2020
Fixing the Breakage from the AddTrust External CA Root Expirationoriginal ↗
30 May 2020
Short Take: Why Trust-On-First-Use Doesn't Work (Even for SSH)original ↗
8 Feb 2020
When Will Your DNS Record Be Published?original ↗
3 Feb 2020
This Is Why You Always Review Your Dependencies, AGPL Editionoriginal ↗
4 Jan 2020

2019

Preventing Server Side Request Forgery in Golangoriginal ↗
20 Dec 2019
Programmatically Accessing Your Customers' Google Cloud Accounts (While Avoiding the Confused Deputy Problem)original ↗
3 Dec 2019
MTA-STS is Hard. Here's how DNS Providers Can Make it Awesome With Automation...original ↗
15 Apr 2019

2018

Making Certificates Easier and Helping the Ecosystem: Four Years of SSLMateoriginal ↗
13 Apr 2018
These Three Companies Are Doing the Internet a Solid By Running Certificate Transparency Logsoriginal ↗
29 Mar 2018