Home
Writing
Security engineering, architecture breakdowns, and DevSecOps deep dives.
Why mTLS Beats API Keys for Service-to-Service Auth
API keys are shared secrets with no identity. mTLS gives you mutual authentication, certificate-based identity, and zero shared secrets.
ReadBuilding a Reverse TLS Tunnel from Scratch in Go
How I built Atlax: a production-grade reverse tunnel with TCP multiplexing, mTLS, and a custom wire protocol to bypass CGNAT.
Read