29Capture a TLS connection in tcpdump. What differs between the TLS 1.2 and 1.3 handshakes, and why does an ops person care?▼mediumNewStripeCloudflareJPMorgan Chase◆ premiumOne round trip versus two is the headline, but the ops-relevant differences hide in what stays plaintext, how resumption works, and which middlewares the change broke.Open full answer →
11TLS renewal is automated and has worked for months. One night every client starts failing certificate verification. What happened?▼mediumNewCloudflareAmazon & AWSFlipkart○ sign inAutomation can renew a certificate without deploying it correctly. Check the served leaf and chain, the client trust store and the exact verification failure.Open full answer →
31After a routine certificate rotation, one service pair fails mTLS with unknown authority while everyone else works. Find the break.▼hardNewStripeJPMorgan ChaseRazorpay◆ premiumThe leaf is valid and the root is trusted, yet verification fails. The gap lives in the middle of the chain, and the exact verify code names it before you open a single config file.Open full answer →
41Monday morning, kubectl fails certificate verification against a cluster nobody touched in a year. Where do you start?▼hardNewRed HatJPMorgan ChaseInfosys◆ premiumEvery client fails at once, which rules out pods and points at shared PKI. Know which certificates share one expiry clock, and the ten-minute fix that avoids a rebuild.Open full answer →
