SSL
TLS is one of those protocols you interact with hundreds of times a day and rarely think about. Every HTTPS connection, every API call over the internet, VPNs using 'SSL' — all of it runs on TLS. The handshake that happens before any of that data flows is the
Security Fundamentals
These are notes I've built up studying security concepts across certifications, labs, and real-world work. Same approach as the networking and identity series — my notes handed off to LLMs with instructions on what to include and how to write it. This post covers the conceptual foundations and the
SASE, SAML & Modern Identity
Part 3 of 3. Parts 1 and 2 covered SASE architecture and SAML. This one is OIDC and OAuth 2.0: the token-based identity framework that powers most modern authentication. There's a lot of ground to cover — stick with it through the token anatomy section, because everything else
SASE, SAML & Modern Identity
Part 2 of 3. Part 1 covered SASE architecture. This one is SAML 2.0 — how federated identity actually works, what the assertion contains, how the flows run, and where it breaks. The vulnerability section is worth reading even if you're not a security engineer. These attacks show