Notes on building secure systems.

Engineering perspectives, field guides, and ideas about zero trust, secure access, and the infrastructure behind modern AI.

Featured

September 202616 min read

QUIC vs. WireGuard: Why QUIC Deserves More Attention for VPN and ZTNA Tunneling

WireGuard is an excellent Layer 3 tunnel, but QUIC's datagrams, streams, TLS-based identity and application-owned dataplane make it a compelling foundation for identity-aware VPN and ZTNA systems.

Read article