Blog
Long-form posts on base64 in Kubernetes, JWT padding, data URIs, and HTTP Basic Auth.
-
Base64 isn't encryption — five places engineers still confuse them
Encoding makes data transportable. Encryption makes data secret. They are not interchangeable. Here are the five most common production bugs that come from confusing them.
-
Debugging Kubernetes Secrets: Why `kubectl get secret` lies to you
kubectl get secret returns base64-encoded values that look like ciphertext but are just an encoding away from plain text. Here's the developer's playbook for inspecting, debugging, and not getting bitten by Kubernetes secrets.