<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>TLS — Things Worth Sharing</title><description>Bài viết gắn tag TLS.</description><link>https://cloudsecop.net/</link><item><title>Gateway HTTP filtering và TLS decryption: khi DNS không đủ</title><link>https://cloudsecop.net/blog/gateway-http-filtering-va-tls-decryption/</link><guid isPermaLink="true">https://cloudsecop.net/blog/gateway-http-filtering-va-tls-decryption/</guid><description>HTTP inspection deep-dive: cài root CA (MDM, GPO), cạm bẫy cert pinning, mẫu DLP, tenant CASB, lan can pháp lý/quyền riêng tư, playbook triển khai, checklist production.</description><pubDate>Sun, 11 May 2025 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloudflare One</category><category>Gateway</category><category>TLS</category><category>DLP</category><category>CASB</category><author>KhaVan</author></item><item><title>CFSSL trong production — Cloudflare&apos;s PKI toolkit cho internal CA</title><link>https://cloudsecop.net/blog/cfssl-pki-toolkit-production/</link><guid isPermaLink="true">https://cloudsecop.net/blog/cfssl-pki-toolkit-production/</guid><description>Tự host internal CA bằng CFSSL: cfssl init, intermediate CA, OCSP responder, multirootca, CI short-lived certs. So sánh AWS Private CA $400/tháng.</description><pubDate>Fri, 15 Nov 2024 00:00:00 GMT</pubDate><category>Cloudflare</category><category>Cloud Security</category><category>PKI</category><category>TLS</category><category>Certificates</category><author>KhaVan</author></item></channel></rss>