Secure integration ↗
Field notes on mTLS, WS-Security, SOAP, HSM file ingestion and certificate lifecycle between organizations — the enterprise security work nobody blogs about.
1 notes
Notes
What broke,
and why.
Not tutorials. Notes from systems that had to work — in banks, in payment flows, and in two products I run on my own.
Event-driven Java ↗
Production notes on Kafka, Debezium change data capture, the transactional outbox, idempotent consumers, Avro schema evolution and audit trails in Spring Boot.
1 notes
Solo SaaS ↗
What it actually takes to run two paying products single-handed: outages, quotas, untrusted code execution, real-time synchronization and the failures that taught the most.
1 notes
All notes · 3
Secure integration8 min
Ingesting HSM-encrypted files over SOAP with mTLS and WS-Security
How to ingest encrypted files from a hardware security module over SOAP in Spring Boot 3.5, secured with mutual TLS and WS-Security, and processed idempotently.
Solo SaaS5 min
The free-tier quota that took my product down for two days
A daily read quota reset at 07:00 UTC, a poller that never slept, and a product that died every afternoon. What went wrong and the three things that hid it.
Event-driven Java6 min
Idempotency keys are not enough when money moves
At-least-once delivery means your consumer will see the same message twice. Why a deduplication table alone is insufficient for financial operations, and what to add.