Latest Posts
-
PKI in Simple Terms: Certificates, CAs, CRLs, OCSP, Trust Stores
.
When an application connects to an HTTPS server, it needs to verify that the server is really who it claims to be. Encrypting the connection is not enough. Without identity verification, an attacker could present their own encryption key and intercept the communication. This is one of the problems that Public Key Infrastructure (PKI) solves.…
-
Key Management Planning: What Auditors Really Look For
.
Encryption is usually one of the first things we think about when protecting sensitive data. We encrypt database fields, API credentials, files, backups, and communication between systems. But there is another question that is sometimes discussed much later: How are we protecting the encryption keys themselves? This is where key management becomes important. Having strong…
-
How Issuers Authenticate Cards (and Send Commands Back)
.
If you’ve worked with payment systems long enough, you’ve probably heard people say that an issuer simply “approves” or “declines” a transaction. While that is technically true, there is actually much more happening behind the scenes. An issuer does not only decide whether a transaction should be approved. It can also send instructions back to…
-
How to Write a Key Management Policy (KMP): A Practical Template
.
Introduction When people talk about security, encryption is usually one of the first things that comes to mind. We encrypt databases, files, backups, APIs, and network connections. But there is one question that is often forgotten. Who manages the encryption keys? Strong encryption becomes much less useful if the keys are stored carelessly, shared between…
-
What a Cryptographic Key Management System Should Look Like
.
Whenever people discuss application security, encryption is usually one of the first topics that comes to mind. Developers often compare algorithms such as AES and RSA, trying to determine which one provides stronger protection. While selecting the right algorithm is important, there is another component that deserves even more attention. That component is cryptographic key…
About Me
Hi I’m Assi—I’m dedicated to advancing cashless payment technology and sharing insights with fellow developers and solution architects on my blog, Cashless Nomad.
I embrace a mobile lifestyle by replacing cash with digital payments, enabling seamless transactions anywhere. Going cashless keeps me connected, agile, and financially flexible—perfect for traveling light and skipping currency hassles.
Checkout my other blogs at marai.dev