Docker Content Trust (DCT) provides the ability to use digital signatures for data sent to and received from remote Docker registries. These signatures allow client-side or runtime verification of the integrity and publisher of specific image tags. Image source: Docker Content Trust Through DCT, image publishers can sign their images and image consumers can ensure… Continue reading Restricting Unverified Kubernetes Content with Docker Content Trust
Category: ssl
OpenSSL as Service
OpenSSL is awesome! Though, requires little manual work to remember all the commands, executing them in a machine that has OpenSSL installed. In this post, I'm about to build an HTTP API over OpenSSL, with the most commonly used commands (and the possibility to extend it further - as required). This will help folks who… Continue reading OpenSSL as Service
Secure Azure Web sites with Web Application Gateway wtih end-to-end SSL connections
The Problem In order to met higher compliance demands and often as security best practices, we want to put an Azure web site behind an Web Application Firewall (aka WAF). The WAF provides known malicious security attack vectors mitigation's defined in OWASP top 10 security vulnerabilities. Azure Application Gateway is a layer 7 load balancer that provides WAF out of the box. However,… Continue reading Secure Azure Web sites with Web Application Gateway wtih end-to-end SSL connections
Reverse Engineering 