The DukeThe Duke Post
5 articles · Subscribe via RSS
-
SecurityThe Network Was Never the Boundary: What mTLS Actually Buys Service-to-Service Traffic
Every internal service already treats "it's on the same network" as proof enough. mTLS replaces that assumption with a certificate check on every connection — which is exactly why it works, and exactly why a bad rotation can take down more at once than an attacker ever could.
-
SecurityThe Data Had No Name on It. It Still Mapped a Secret Military Base.
A 2018 fitness-app heatmap outed military bases without a single name field attached — where PII actually hides in your stack, and which of redaction, masking, tokenization, or encryption actually stops it.
-
SecurityThe Front Door Won't Close: What a DDoS Attack Actually Does to Production
DDoS isn't about traffic volume — it's about bottlenecks, capacity, and how well you can tell attackers apart from real users at 3am.
-
GeneralWelcome to The Duke Post
What this site is, and how it works.
-
GeneralHow the Wire feed stays current
A quick note on the RSS sync mechanism behind The Duke Post.