[ blog ]
Writing
Security writeups and notes. Generalizable lessons, scrubbed of internal detail.
-
Fail closed: default-deny as a design discipline
A control that fails open is a control that isn't there when it matters. Notes on building systems where the error path is also the safe path.
-
Certificate rotation that doesn't page you at 3am
Most mTLS outages aren't attacks — they're expiry. A few design choices turn rotation from a recurring incident into a non-event.