Security

IIoT Ingress Postmortem: Troubleshooting EMQX 5.8 Under Podman Rootless

A postmortem of an IIoT ingress deployment failure: under Podman Rootless, EMQX 5.8 exposed unstable Erlang IPC, HOCON schema validation failures, a blocked security-group port, and M2M requests rejected by CSRF middleware. This post covers the confirmed causes, fixes, and validation path.

JWT Dual-Token Hardening Postmortem: From Stateless Refresh to Revocable Redis Sessions

A security hardening postmortem for JWT AT/RT architecture: treating Redis reservation as completed and implementing RT rotation, replay detection, and revocable sessions.

HTTPS Upgrade Triggered 403: A Deep Postmortem from Security Middleware to Container Isolation

A postmortem on a persistent 403 after HTTPS migration, traced to both missing CSRF allowlist updates and Podman Rootless image namespace isolation.