For Developers & Technical Teams
Layered practices for protecting applications, servers, files, identity, and sensitive data.
8 articles
Application & Infrastructure Security ·
Cloudflare uses the movement of lava lamps as an additional entropy source for secure random-number generation in cryptographic systems.
Application & Infrastructure Security ·
Reliable email delivery depends on more than a running server: IP reputation, authentication, and sending policies determine whether messages reach the inbox.
Application & Infrastructure Security ·
The basic architecture for routing tenant subdomains with wildcard DNS and securing them with one certificate.
Application & Infrastructure Security ·
FinTech systems balance transaction speed with identity, risk, and behavior checks while minimizing disruption for legitimate customers.
Application & Infrastructure Security ·
Keep object storage private, control access with signed URLs or a delivery layer, and separate file growth from the application server.
Application & Infrastructure Security ·
XSS protection depends on context-aware output escaping, CSP, and treating user-controlled data as untrusted.
Application & Infrastructure Security ·
The server does not contact the authenticator on every login; both sides generate a code from a shared secret and the current time.
Application & Infrastructure Security ·
Server hardening starts by reducing exposure, limiting privileges, and protecting secrets, then supports those controls with monitoring and restorable backups.