Days are not good, NSA or other Governmental agencies can add vulnerability on your patches, repo which many peoples may use. It is Not Safe to Commit All on VPS or Cloud Server Hosted Git Without Signing At All. Here is How to Sign Git, Github Commits With GPG For Security. Previously we talked about GNU PG, GPG on Facebook (do not laugh, Facebook about page is ONLY for showing your Public Key), … [Read more...]
Update letsencrypt to certbot (Ubuntu letsencrypt 16.04 Error Fix)
Previously, we wrote how to easily install Let's Encrypt SSL Certificate. Here Are Steps To Update letsencrypt to certbot For the Users Who Used Former Before letsencrypt Became certbot. It is Mandatory For Ubuntu 16.04 LTS. Ubuntu has old apt version agent. Such users who used apt-get install letsencrypt should follow this guide too. Why Follow The Steps To Update letsencrypt to … [Read more...]
Easy Steps To Setup Let’s Encrypt on Ubuntu 16.04, Nginx
Some of the readers of this website asked for a guide on Let's Encrypt on Ubuntu 16.04. Here Are Easy Steps To Setup Let's Encrypt on Ubuntu 16.04, Nginx With HSTS, ALPN on HTTP/2, OCSP Stapling, Public Key Pinning (HPKP), Cipher. Needless to say - Let's Encrypt is free SSL certificate. You need not to read guides on the same various web hosts. They have wrongs and some stuffs are copy-pasted from … [Read more...]
Why CentminMod for HTTP/2 Ngnix LEMP Setup is Practical
CentminMod originally was just a script to automate LEMP setup. Typing commands on SSH is usually suggested for own production servers for various reasons. Indeed we have few thousands guides on them. But, Today We Will Discuss an Opposite Matter - The Reasons Why CentminMod for HTTP/2 Ngnix LEMP Setup is Practical For Cloud Server or Dedicated Server. After many testing, we noticed that … [Read more...]
Rowhammer Exploit Threatens Cloud Virtual Machines
Row hammer / rowhammer can open the way to the memory cells to leak their charges and interact electrically within them. Each bit of stored data occupies a separate memory cell that is electrically implemented with one capacitor and one transistor in DRAM - charged or discharged of a capacitor determines whether a DRAM cell stores binary value as 1 or 0. So it is happening at hardware level. … [Read more...]
HTTP/2 : Checklist For CDN & PaaS Performance
Previously, we talked about the basic knowhow around HTTP/2 optimization. When Are Using CDN Service, CDN Terminates the Connection Geographically Closer to the User and Thus Increasing the Chance to Reduce the TCP and TLS Handshake Cost. Not All CDNs are Optimized For HTTPS & HTTP/2. After reading this brief guide on HTTP/2 Checklist For CDN & PaaS Performance, we expect that the reader … [Read more...]
Install Nginx HTTP/2 With ALPN on Ubuntu 14.04 From ondrej/nginx PPA
In our previous guide, we have shown how to easily upgrade Nginx on Ubuntu 14.04 for HTTP/2 support. The required changes in the /etc/nginx/sites-enabled/default file, /etc/nginx/nginx.conf file and limitations of that way of installation has been discussed on this article. In this guide, we will show how to install Nginx HTTP/2 with ALPN on Ubuntu 14.04 from ondrej/nginx PPA. It simply means, we … [Read more...]
Ubuntu 14.04 Nginx HTTP/2 Directive, NPN & ALPN
Previously, we wrote how to upgrade Ubuntu 14.04 LTS running Nginx to support HTTP/2 avoiding recompilation or actual stopping the server. Here is a Handy Guide For the New Users Around Ubuntu 14.04 Nginx HTTP/2 Directive, NPN & ALPN. Sadly, HTTP/2 is Not Exactly Easy Like SPDY. The reasons are obvious - SPDY, as well QUIC, HTTP/1.1 is within HTTP/2. Sadly, what we have not said in that easy … [Read more...]
Fix Nginx OCSP ERROR : OCSP Response Expired
Previously we written in details on How to Enable OCSP Stapling Nginx. Here is How to Fix Nginx OCSP ERROR - OCSP Response Expired After Enabling OCSP Stapling on Nginx. Error is Due to Certain Criterion of RFC. This is not quite uncommon error. Why OCSP ERROR : OCSP Response Expired Appears? It is common to get this error in Opera Browser, where the error code is Error 1066. … [Read more...]
Add Content Security Policy (CSP) Header in Nginx With report-uri
In the previous guide, we talked about how to around HTTP Public Key Pinning (HPKP) Nginx With report-uri. Content Security Policy (CSP) header adds control over the resources to be loaded on modern browsers to increase security. Here is How to Add Content Security Policy Header in Nginx. Table of Contents 1 Introduction 2 What is Content Security Policy (CSP) Header? 3 How To Add … [Read more...]
Will Brexit Affect Cloud Computing & Server Market?
UK referendum may force to rethink the CIOs about data management & privacy policies. Shift From US to EU in Dedicated, Cloud Server & CDN is Significant After PRISM Scandal. Will Brexit Affect Cloud Computing & Server Market? Will Brexit Affect Cloud Computing & Server Market? Previously, we talked about the inclination towards Swiss Cloud for data security and data privacy. It is … [Read more...]