Wireguard
guest@6admin.io:~$ ls ~/tags/wireguard
Security Through Obscurity Is Not Security, Digital Hygiene Is
Twenty years of comments on port knocking, port 22 and photos of house keys: why obscurity alone is vain, why Kerckhoffs doesn't extend everywhere and why the real question is called digital hygiene.
Portknocking and SSH tunneling: the magic tricks before WireGuard
WireGuard ships in 2016 and makes two beloved 2008 setups outdated: portknocking (with automatic combination generation, mandatory NTP and an encfs USB key) and SSH tunneling. The era's tone, the in-production demo until 2018 at a hosting provider and why a VPN that says nothing wins.
SSH Hardening: the 2017 Trilogy Reread in 2026
In 2017 I answered a naive SSH hardening article in three comments: root, port, keys. Nine years later the principles hold, the context changed: bastions, native Windows, the client supply chain and the physical threat no config covers.
SSLH: ssh and https on the same port
A 2007 memo: sslh multiplexes ssh and https on port 443, the only port of paranoid firewalls. How it works, what it allowed and why (edit 2026) nobody would put it in production today.