I’m a Senior Software Engineer living in Berlin. Shifting limits based on quality and robustness. Cutting-edge software development. Defining durable and flexible interfaces. Creating rich and intuitive user experiences.

Tag: security

Deploying a fully-trusted certificate chain in your LAN

This guide shows you how to set up fully trusted SSL (HTTPS) for all your private LAN services—with no warnings—by combining Cloudflare-managed DNS, local DNS routing with dnsmasq, and Let’s Encrypt certificates via DNS challenge. You’ll learn how to automate certificate management for any subdomain, ensure seamless access across your devices, and secure your local environment like a public website, all while keeping your services private.

Have a look at the 3-way TCP and the TLS handshake packets locally

Learn how HTTPS really works by creating a locally-trusted certificate with mkcert, running an Nginx server in Docker, capturing encrypted traffic with tcpdump, and analyzing the TCP and TLS handshakes packet-by-packet using tshark. Perfect for developers who want practical insight into secure connections and protocol flows.