Securely Expose your Homelab Services with Mutual TLS скачать в хорошем качестве

Securely Expose your Homelab Services with Mutual TLS

Today I'm diving into Mutual TLS to securely expose my homelab services! TLS is already ubiquitous in the modern era, providing strong symmetric encryption, perfect forward secrecy, and a public chain of trust to authenticate the server. But, it also has a lesser known ability to authenticate the client. By creating our own certificate authority to issue certs to clients, we can securely authenticate them to the server, preventing other users from even hitting our web app and probing it for vulnerabilities. This is a simpler solution than using a VPN to 'expose' your services, as long as the app is already relying on TLS (which includes more protocols than just HTTPS). There's less user friction in installing a .p12 cert than setting up a VPN client, which could be important if you are sharing your services with friends and family. Blog post with instructions: https://www.apalrd.net/posts/2024/net... Check ProtoArc XKM01 CaseUp travel solution from their official website and use code “Apalrd25” to enjoy 25% off Black Friday / Cyber Monday Sales at https://www.protoarc.com/products/xkm... or Amazon’s Black Friday / Cyber Monday deals from Nov 21st https://www.amazon.com/stores/ProtoAr... Diffie-Hellman explainers:    • Secret Key Exchange (Diffie-Hellman) ...      • Diffie-Hellman Key Exchange: How to S...   Support me on Ko-Fi if you enjoy my content and find it useful: https://ko-fi.com/apalrd Feel free to chat about my upcoming projects on Discord!   / discord   Follow me on Mastodon: https://hachyderm.io/@apalrd Timestamps: 00:00 - Intro 03:32 - Concepts 08:10 - Certificate Authority 13:27 - Server Setup 18:53 - Conclusion #homelab #informationsecurity #ProtoArc #ProtoArcXKM01CaseUp #ProtoArcFoldableKeyboard