Articlesotel-operator
Original Persian technical editorial based on the official sources below. It covers the subject, architecture, practical use cases, important limitations and defensive considerations.
1 min readRead story ↗
IROSG / ARTICLES
Articles.
Deep IT guides for understanding, building and troubleshooting.
Practical articles and fresh perspectives for thoughtful technical decisions.
Explore the collection 76
Articles
Articlesconsul-service-discovery
Original Persian technical editorial based on the official sources below. It covers the subject, architecture, practical use cases, important limitations and defensive considerations.
1 min readRead story ↗
Articlesharbor-registry
Original Persian technical editorial based on the official sources below. It covers the subject, architecture, practical use cases, important limitations and defensive considerations.
1 min readRead story ↗
Articlesexternal-secrets
Original Persian technical editorial based on the official sources below. It covers the subject, architecture, practical use cases, important limitations and defensive considerations.
1 min readRead story ↗
Articlesexternal-dns
Original Persian technical editorial based on the official sources below. It covers the subject, architecture, practical use cases, important limitations and defensive considerations.
1 min readRead story ↗
Articleshelm-chart-releases
Original Persian technical editorial based on the official sources below. It covers the subject, architecture, practical use cases, important limitations and defensive considerations.
1 min readRead story ↗
ArticlesNetwork Time Security: securing NTP with RFC 8915 and chrony
A comprehensive technical guide to NTS-KE, TLS, AEAD, cookies and practical time synchronization security using chrony.
1 min readRead story ↗
ArticlesTLS Encrypted ClientHello: ECH RFC 9849 and DNS deployment guide
A technical guide to Encrypted ClientHello, ECHConfig publication, HTTPS DNS records, key rotation and privacy limitations.
1 min readRead story ↗
ArticlesSMTP DANE and TLSA: secure mail delivery with DNSSEC
A guide to SMTP DANE, TLSA certificate association records, DNSSEC validation, downgrade protection and safe mail-server deployment.
1 min readRead story ↗
ArticlesThe Update Framework: securing software update systems
A practical study of The Update Framework roles, threshold signing, root-key rotation, rollback and freeze attack protection, delegated targets and client verification.
1 min readRead story ↗
ArticlesSPIFFE and SPIRE workload identity in Kubernetes and Linux
A technical guide to SPIFFE IDs, X.509-SVID certificates, SPIRE server and agent architecture, workload attestation, trust domains and service-to-service authentication.
1 min readRead story ↗
ArticlesA practical guide to SLSA Build Provenance v1.2
A technical guide to the structure, trust model, verification and CI/CD integration of SLSA Build Provenance v1.2.
1 min readRead story ↗