Topics

My writing draws on production experience across infrastructure and security. Explore the seven topics below, or browse the systems and operations notes.

• AI Infrastructure Security: Security for the platforms AI runs on: workload and agent identity, keys and PKI, the model supply chain, and the controls auditors sign off on.
• PKI & Encryption: Public key infrastructure, encryption, key management, certificates, and the trust foundations secure systems depend on.
• Email Security & Privacy: Email authentication, transport security, privacy, and the operational controls that keep messages trustworthy.
• DNS Security & Privacy: DNS security, privacy, DNSSEC, resilient resolution, and the controls that protect naming infrastructure.
• Kubernetes Security: Kubernetes workload security, identity, admission controls, isolation, and the platform practices that keep clusters dependable.
• Zero Trust: Zero Trust architecture, firewalls, identity-aware access, segmentation, and the platform controls that limit blast radius.
• Networking: BGP, anycast, enterprise routing, IPv6, high-performance networking, and multi-region connectivity for modern platforms.
• Systems & Ops Notes: Field notes from 20+ years across the Linux kernel, DNS, email and SMTP infrastructure, DevOps, SRE, and encryption.