It is super easy to implement authentication via an app where your users get a new code every 30 seconds.
Continue reading “2FA with Authenticator App, No SMS Needed”
Enabling TLS v1.3, HTTP2, and Push on Apache 2
Keeping the server spec up to date take regular effort. In this post we will discuss how to set up and enable some of the most recent web technologies.
Continue reading “Enabling TLS v1.3, HTTP2, and Push on Apache 2”
Random Password Generator in Javascript
I’ve been wanting to have a simple password generator. There are a few solutions out on the internet, but none quite what I wanted. Here is a simple and customizable JavaScript password generator.
Getting More A+ SSL Ratings
In this post I mentioned about getting an A+ rating on ssllabs.com. It was not easy for me to get an A+ on some of the other sites like HT Bridge, but I finally got it! And with it I got compliance with:
- PCI DSS
- HIPAA
- NIST
Better SSL than Google? Let’s Encrypt is Good!
I was rather shocked.
After moving the server into Google Cloud, I decided to see what the SSL testing by SSL Labs would say about it. I secure all of my servers with the Let’s Encrypt program sponsored by the EFF and others.
I was use to getting a score of A with their test. Today though, the results came up A+. I have never seen SSL Labs give out an A+ score before. Not even to Google.
Continue reading “Better SSL than Google? Let’s Encrypt is Good!”