
SECURITY GUIDE
TLS renewal is a dependency chain, not a calendar reminder
The hostname, validation method, certificate store, deployment path and expiry alert that belong in one runbook.
Read the note →Follow the path from browser to edge to origin, and record the controls that protect each hop. Every article carries a date, a source cue and a clear evidence boundary.


The hostname, validation method, certificate store, deployment path and expiry alert that belong in one runbook.
Read the note →
A way to inspect edge cache, origin headers, bypass rules and purge behavior before calling a page fast.
Read the note →
An operator-friendly pass through updates, least privilege, headers, backups, logs and the origin boundary.
Read the note →
What the Chave Movel Digital is, which agencies built Portugal’s digital state, and how internet governance works there, in plain English.
Read the note →