Infrastructure and Security
-
Articles on HTTPS infrastructure and browser security: how HSTS works and how to clear it, SSL offloading and passthrough on load balancers, certificate pinning, certificate revocation lists, and the Firefox Unified Trust Panel.
-
1Firefox's Unified Trust Panel: What the Shield Icon Means
Firefox now shows one shield instead of the padlock. Learn what each shield icon means, how to check an SSL certificate and what it means for site owners.
-
2How to Clear HSTS Settings in Chrome, Firefox, and Microsoft Edge
Delete a stored HSTS policy in Chrome, Firefox or Edge, see how to disable HSTS on your own site with max-age=0 and when clearing HSTS will not help.
-
3What Is HTTP Strict Transport Security (HSTS) and How to Implement It?
Learn how HSTS works, add the header on Apache, Nginx or IIS, test it, raise max-age safely and submit your domain to the HSTS preload list.
-
4What Is SSL Offloading? How It Works, Benefits, and Types
SSL offloading moves TLS work from web servers to a load balancer or proxy. See how it works, its benefits, TLS termination vs bridging and security tips.
-
5What Is SSL Passthrough? How Does It Work?
SSL passthrough sends encrypted traffic to backend servers without decrypting it. Learn how it works, its pros and cons and how it compares to offloading.
-
6What Is SSL/TLS Certificate Pinning? How It Works and What Are the Risks?
Learn how certificate and public key pinning work, what they protect against, the outage risks they bring and when pinning makes sense for your app.
-
7What Is a Certificate Revocation List (CRL) and How Does It Work?
Learn why certificates are revoked, how a CRL is published and checked, what it contains, its limitations and how CRL checking differs from OCSP.
-
