#Security
3 articles — newest first.
- 8 min read
Encrypting data at rest in a Node app without inventing crypto
Field-level encryption in Node with the built-in crypto module: AES-GCM, where the key actually lives, key rotation that does not require downtime, and what encryption at rest does not protect you from.
- 9 min read
Zero Network Leakage in CI: Deny-by-Default Egress Harness
A practical, cross-platform harness to prove your desktop app makes zero outbound network calls in CI by default—block, log, count, and assert.
- 8 min read
Zero-Account Auth: Device-Bound Identity + Capability Tokens
Build secure apps without accounts or an auth server: bind identity to device keys, mint PASETO capability tokens, and enforce DPoP for stateless, least-privilege access.