VirtualTam's bookmarks

81. ubuntu - Is it possible to use Ansible authorized_key exclusive with multiple keys? - Stack Overflow 2019-09-08

    tags: configuration-management/ansible, cryptography/public-key-infrastructure, network/ssh, security, security/authentication

    [ permalink ]

    • https://docs.ansible.com/ansible/latest/modules/authorized_key_module.html
    • https://github.com/ansible/ansible-modules-core/commit/6f6d7f5c18296e3fe84fa5aef674948753ff52ae
    • https://github.com/ansible/ansible/issues/11347
82. trailscraper: A command-line tool to get valuable information out of AWS CloudTrail 2019-08-08

    tags: cloud/aws, observability/logging, programming/python, security, user

    [ permalink ]
83. AWS Tutorial: Enable Your Users to Configure Their Own Credentials and MFA Settings - Identity and Access Management 2019-08-08

    tags: cloud/aws, programming/api, security, security/authentication, security/authorization, user

    [ permalink ]

    • https://aws.amazon.com/blogs/security/how-to-delegate-management-of-multi-factor-authentication-to-aws-iam-users/
    • https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_examples_aws_my-sec-creds-self-manage.html
    • https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html
84. testssl.sh: Testing TLS/SSL encryption anywhere on any port 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/shell/bash, web

    [ permalink ]
85. ssllabs-scan: A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing. 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/go

    [ permalink ]
86. PGP Subkeys 2019-07-30

    tags: cryptography/pgp, cryptography/pgp/gnupg, team

    [ permalink ]

    • https://security.stackexchange.com/questions/76940/what-exactly-is-a-subkey
    • https://www.enigmail.net/forum/viewtopic.php?f=3&t=375
    • http://www.connexer.com/articles/openpgp-subkeys
    • https://security.stackexchange.com/questions/43590/pgp-why-have-separate-encryption-subkey
87. FreeIPA Installation du serveur et de son réplica | Worteks 2019-07-25

    tags: kerberos, network/ldap, samba, security/authentication, security/authorization, user

    [ permalink ]

    • https://www.worteks.com/fr/2018/03/29/freeipa-part1/
    • https://www.worteks.com/fr/2018/04/16/freeipa-partie-2-clients-hbac-sudo-mots-de-passe/
    • https://www.worteks.com/fr/2018/05/07/freeipa-partie-3-haute-disponibilite-automount/
    • https://www.worteks.com/fr/2019/05/23/freeipa-partie-4-seconds-facteurs-dauthentification/
88. How do you achieve fully centralized, unified user management with true SSO? : selfhosted 2019-07-22

    tags: network/ldap, security/authentication, security/authorization, self-hosting, single-sign-on, user

    [ permalink ]
89. Federation with Keycloak and FreeIPA - Red Hat Customer Portal 2019-07-22

    tags: network/ldap, red-hat, security/authentication, security/authorization, single-sign-on, user

    [ permalink ]
90. Kubernetes-native microservices API gateway: Ambassador 2019-07-15

    tags: envoy, linux/container/docker, linux/container/kubernetes, network, network/http, network/proxy, network/transport-layer-security

    [ permalink ]

    • https://blog.getambassador.io/envoy-vs-nginx-vs-haproxy-why-the-open-source-ambassador-api-gateway-chose-envoy-23826aed79ef
    • https://docs.microsoft.com/en-us/azure/architecture/patterns/sidecar
    • https://www.getambassador.io/docs
91. gopenpgp: A high-level OpenPGP library 2019-06-27

    tags: cryptography/encryption, cryptography/pgp, gpg, programming/go, security

    [ permalink ]

    • https://gopenpgp.org/
    • https://protonmail.com/blog/openpgp-golang/
92. Comparison of NAT Instances and NAT Gateways - Amazon Virtual Private Cloud 2019-06-27

    tags: cloud, cloud/aws, network, network/router, security

    [ permalink ]

    • https://www.theguild.nl/cost-saving-with-nat-instances/
    • https://dzone.com/articles/nat-instance-vs-nat-gateway
    • https://docs.aws.amazon.com/vpc/latest/userguide/VPC_NAT_Instance.html
    • https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html
    • https://aws.amazon.com/blogs/aws/new-managed-nat-network-address-translation-gateway-for-aws/
    • https://dzone.com/articles/aws-vpc-nat-instance-failover
    • https://aws.amazon.com/articles/high-availability-for-amazon-vpc-nat-instances-an-example/
93. Diffie-Hellman Key Exchange 2019-06-24

    tags: cryptography, cryptography/elliptic-curve, cryptography/encryption, cryptography/public-key-infrastructure, security

    [ permalink ]

    • https://security.stackexchange.com/questions/35471/is-there-any-particular-reason-to-use-diffie-hellman-over-rsa-for-key-exchange
    • https://security.stackexchange.com/questions/45963/diffie-hellman-key-exchange-in-plain-english
    • https://en.wikipedia.org/wiki/Elliptic-curve_Diffie%E2%80%93Hellman
    • https://en.wikipedia.org/wiki/Forward_secrecy
94. High Performance Browser Networking | Ilya Grigorik 2019-06-24

    tags: book, cryptography/encryption, cryptography/public-key-infrastructure, cryptography/rsa, internet/browser, mobile, network/http, network/transport-layer-security, security, web

    [ permalink ]

    • https://hpbn.co/webrtc/
    • https://hpbn.co/transport-layer-security-tls/
    • https://hpbn.co/webrtc/
95. helm-secrets: a helm plugin that helps managing secrets with Git workflow 2019-06-18

    tags: cryptography/pgp, linux/container/kubernetes, linux/container/kubernetes/helm, programming/yaml, secret, security, security/password

    [ permalink ]

    • https://github.com/helm/helm/issues/2196
    • https://github.com/mozilla/sops
    • https://medium.com/faun/helm-charts-for-more-complex-projects-and-how-to-secure-them-a1dfde804226
    • https://developer.epages.com/blog/tech-stories/kubernetes-deployments-with-helm-secrets/
    • https://lab.getbase.com/helm-secrets-a-missing-piece-in-kubernetes/
96. sops: Secrets management stinks, use some sops! 2019-06-18

    tags: cryptography/encryption, cryptography/pgp, gpg, linux/container/kubernetes, programming/json, programming/yaml, secret, security

    [ permalink ]

    • https://godoc.org/go.mozilla.org/sops
    • https://jve.linuxwall.info/blog/index.php?post/2015/10/01/Introducing-Sops%3A-an-editor-of-encrypted-file-that-uses-AWS-KMS-and-PGP
97. dex: OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors 2019-06-11

    tags: network/ldap, programming/go, security/authentication, security/authorization, security/openid, security/token

    [ permalink ]
98. MIG: Mozilla InvestiGator 2019-05-27

    tags: filesystem, mozilla, network, security, sysadmin

    [ permalink ]

    • https://github.com/mozilla/mig
    • https://j.vehent.org/blog/index.php?post/2015/07/26/Using-Mozilla-Investigator-%28MIG%29-to-detect-unknown-hosts
    • https://j.vehent.org/blog/index.php?post/2015/09/13/Investigating-authorized-keys-across-the-infrastructure-using-MIG
99. Go-SCP | Go Secure Coding Practices 2019-05-23

    tags: data, database, programming/go, security, server, web

    [ permalink ]

    • https://github.com/OWASP/Go-SCP
100. Kubernetes the Not So Hard Way With Ansible - Ingress with Traefik 2019-04-19

     tags: configuration-management/ansible, distributed-system/cluster, linux/container/kubernetes, network, network/firewall, network/http, network/http-server/traefik, network/transport-layer-security

     [ permalink ]

     • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-network-policies/
     • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-the-basics/