<?xml version="1.0" encoding="UTF-8"?>
 <rdf:RDF xmlns="http://purl.org/rss/1.0/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://web.resource.org/cc/" xmlns:syn="http://purl.org/rss/1.0/modules/syndication/" xmlns:admin="http://webns.net/mvcb/">
  <channel rdf:about="http://pinboard.in">
    <title>Pinboard (cstrahan)</title>
    <link>https://pinboard.in/u:cstrahan/public/</link>
    <description>recent bookmarks from cstrahan</description>
    <items>
      <rdf:Seq>	<rdf:li rdf:resource="https://tls13.ulfheim.net/"/>
	<rdf:li rdf:resource="https://blog.filippo.io/we-need-to-talk-about-session-tickets/"/>
	<rdf:li rdf:resource="https://nickcraver.com/blog/2017/05/22/https-on-stack-overflow/#preparing-for-a-proxy-client-timings"/>
	<rdf:li rdf:resource="https://nickcraver.com/blog/2017/05/22/https-on-stack-overflow/"/>
	<rdf:li rdf:resource="https://github.com/ouspg/trytls"/>
	<rdf:li rdf:resource="http://blog.palominolabs.com/2011/10/18/java-2-way-tlsssl-client-certificates-and-pkcs12-vs-jks-keystores/"/>
	<rdf:li rdf:resource="https://blog.cloudflare.com/introducing-cfssl/"/>
	<rdf:li rdf:resource="https://blog.cloudflare.com/how-to-build-your-own-public-key-infrastructure/"/>
	<rdf:li rdf:resource="http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html"/>
	<rdf:li rdf:resource="https://istlsfastyet.com/?"/>
	<rdf:li rdf:resource="https://raymii.org/s/tutorials/OCSP_Stapling_on_nginx.html"/>
	<rdf:li rdf:resource="http://shizmob.tumblr.com/post/67305143330/8192-bit-rsa-keys-in-os-x"/>
	<rdf:li rdf:resource="http://railsapps.github.io/openssl-certificate-verify-failed.html"/>
	<rdf:li rdf:resource="http://newsgroups.derkeiler.com/Archive/Misc/news.software.readers/2009-11/msg00358.html"/>
	<rdf:li rdf:resource="https://www.ssllabs.com/downloads/SSL_TLS_Deployment_Best_Practices_1.0.pdf"/>
	<rdf:li rdf:resource="http://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/"/>
	<rdf:li rdf:resource="http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf"/>
	<rdf:li rdf:resource="http://ariejan.net/2011/10/22/automatically-switch-between-ssl-and-non-ssl-with-nginx-unicorn-rails"/>
      </rdf:Seq>
    </items>
  </channel><item rdf:about="https://tls13.ulfheim.net/">
    <title>The Illustrated TLS 1.3 Connection: Every Byte Explained</title>
    <dc:date>2019-08-02T03:08:51+00:00</dc:date>
    <link>https://tls13.ulfheim.net/</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>networking reference ssl security</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:f236c0b56478/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:networking"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:reference"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:security"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://blog.filippo.io/we-need-to-talk-about-session-tickets/">
    <title>We need to talk about Session Tickets</title>
    <dc:date>2017-09-28T18:20:26+00:00</dc:date>
    <link>https://blog.filippo.io/we-need-to-talk-about-session-tickets/</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>ssl</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:890a3c17a50b/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://nickcraver.com/blog/2017/05/22/https-on-stack-overflow/#preparing-for-a-proxy-client-timings">
    <title>Nick Craver - HTTPS on Stack Overflow: The End of a Long Road</title>
    <dc:date>2017-05-24T19:11:38+00:00</dc:date>
    <link>https://nickcraver.com/blog/2017/05/22/https-on-stack-overflow/#preparing-for-a-proxy-client-timings</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>ssl deployment devops</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:b4e008cb7a65/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:deployment"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:devops"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://nickcraver.com/blog/2017/05/22/https-on-stack-overflow/">
    <title>Nick Craver - HTTPS on Stack Overflow: The End of a Long Road</title>
    <dc:date>2017-05-22T23:03:09+00:00</dc:date>
    <link>https://nickcraver.com/blog/2017/05/22/https-on-stack-overflow/</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>ssl security</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:896b6a249733/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:security"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://github.com/ouspg/trytls">
    <title>ouspg/trytls: Does ​your​ library check TLS certificates properly?</title>
    <dc:date>2016-08-22T16:16:22+00:00</dc:date>
    <link>https://github.com/ouspg/trytls</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>ssl security</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:8fb4c33da620/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:security"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="http://blog.palominolabs.com/2011/10/18/java-2-way-tlsssl-client-certificates-and-pkcs12-vs-jks-keystores/">
    <title>Java 2-way TLS/SSL (Client Certificates) and PKCS12 vs JKS KeyStores | Palomino Labs Blog</title>
    <dc:date>2015-10-28T22:33:28+00:00</dc:date>
    <link>http://blog.palominolabs.com/2011/10/18/java-2-way-tlsssl-client-certificates-and-pkcs12-vs-jks-keystores/</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>java ssl</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:4617d9af7eb6/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:java"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://blog.cloudflare.com/introducing-cfssl/">
    <title>Introducing CFSSL - CloudFlare's PKI toolkit</title>
    <dc:date>2015-06-24T23:57:18+00:00</dc:date>
    <link>https://blog.cloudflare.com/introducing-cfssl/</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>ssl security</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:19fefc2a6d33/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:security"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://blog.cloudflare.com/how-to-build-your-own-public-key-infrastructure/">
    <title>How to build your own public key infrastructure</title>
    <dc:date>2015-06-24T23:40:33+00:00</dc:date>
    <link>https://blog.cloudflare.com/how-to-build-your-own-public-key-infrastructure/</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>security ssl</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:4ecba20e8b32/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:security"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html">
    <title>Google Online Security Blog: This POODLE bites: exploiting the SSL 3.0 fallback</title>
    <dc:date>2014-10-15T20:02:27+00:00</dc:date>
    <link>http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>security ssl</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:f9cdba0fc080/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:security"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://istlsfastyet.com/?">
    <title>Is TLS Fast Yet?</title>
    <dc:date>2014-06-28T18:52:47+00:00</dc:date>
    <link>https://istlsfastyet.com/?</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>ssl performance</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:ef22e28ea376/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:performance"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://raymii.org/s/tutorials/OCSP_Stapling_on_nginx.html">
    <title>OCSP Stapling on nginx - Raymii.org</title>
    <dc:date>2014-06-03T19:26:26+00:00</dc:date>
    <link>https://raymii.org/s/tutorials/OCSP_Stapling_on_nginx.html</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>nginx ssl security</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:e2bfa4e6ca75/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:nginx"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:security"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="http://shizmob.tumblr.com/post/67305143330/8192-bit-rsa-keys-in-os-x">
    <title>8192+ bit RSA keys in OS X</title>
    <dc:date>2013-11-19T06:38:23+00:00</dc:date>
    <link>http://shizmob.tumblr.com/post/67305143330/8192-bit-rsa-keys-in-os-x</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>osx security ssl</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:92edfd705c99/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:osx"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:security"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="http://railsapps.github.io/openssl-certificate-verify-failed.html">
    <title>OpenSSL Errors and Rails – Certificate Verify Failed · RailsApps</title>
    <dc:date>2013-04-16T15:10:43+00:00</dc:date>
    <link>http://railsapps.github.io/openssl-certificate-verify-failed.html</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>mac ssl</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:806dae46bc98/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:mac"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="http://newsgroups.derkeiler.com/Archive/Misc/news.software.readers/2009-11/msg00358.html">
    <title>Re: slrn: reply on Mac</title>
    <dc:date>2013-04-16T15:00:51+00:00</dc:date>
    <link>http://newsgroups.derkeiler.com/Archive/Misc/news.software.readers/2009-11/msg00358.html</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>mac ssl</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:4f7adb10a8b0/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:mac"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://www.ssllabs.com/downloads/SSL_TLS_Deployment_Best_Practices_1.0.pdf">
    <title>SSL/TLS Deployment Best Practices</title>
    <dc:date>2013-02-05T17:31:31+00:00</dc:date>
    <link>https://www.ssllabs.com/downloads/SSL_TLS_Deployment_Best_Practices_1.0.pdf</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>security ssl sysadmin pdf</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:9fa0b6daaf09/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:security"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:sysadmin"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:pdf"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="http://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/">
    <title>Hardening Your Web Server’s SSL Ciphers — Hynek Schlawack</title>
    <dc:date>2013-02-05T17:31:06+00:00</dc:date>
    <link>http://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>deployment security ssl networking</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:a572e72e714b/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:deployment"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:security"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:networking"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf">
    <title>The Most Dangerous Code in the World: Validating SSL Certiﬁcates in Non-Browser Software</title>
    <dc:date>2012-10-25T03:19:24+00:00</dc:date>
    <link>http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>ssl security</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:e5457d474129/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:security"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="http://ariejan.net/2011/10/22/automatically-switch-between-ssl-and-non-ssl-with-nginx-unicorn-rails">
    <title>Automatically switch between SSL and non-SSL with Nginx+Unicorn+Rails - Ariejan.net</title>
    <dc:date>2012-02-02T23:49:30+00:00</dc:date>
    <link>http://ariejan.net/2011/10/22/automatically-switch-between-ssl-and-non-ssl-with-nginx-unicorn-rails</link>
    <dc:creator>cstrahan</dc:creator><dc:subject>ssl rails nginx devops</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:cstrahan/b:ad0bdfeee5ee/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:ssl"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:rails"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:nginx"/>
	<rdf:li rdf:resource="https://pinboard.in/u:cstrahan/t:devops"/>
</rdf:Bag></taxo:topics>
</item>
</rdf:RDF>