Security blog
Why bigger isn’t always better when it comes to TLS key size
When it comes to the size of the encryption keys used in server certificates, bigger isn’t necessarily better. In this post, we explore why this is the case by examining the function of the…
4 characteristics of developer-friendly cloud security controls
If you’re evaluating web application security tools exclusively for their security requirements, you may be missing one of the most essential opportunities to successfully grow your secure…
Fastly’s security DNA: a look at our culture of safety, privacy, and trust
Fastly's heritage of security runs deep — far beyond our portfolio of web application and API security products. Our philosophy of developer empowerment, focus on community, and values…
TLS 1.3 is faster, more robust, and now available
TLS 1.3 is now available for Fastly customers. The newest version of the TLS protocol, TLS 1.3 is designed to improve the performance and security of traffic served over HTTPS.
Performance matters: why Compute@Edge does not yet support JavaScript
Building our own compiler toolchain allows Compute@Edge to be both performant and secure. It also means we have to bring developers’ most-loved language into the fold in the right way.
Meet Fastly’s new security dashboard integrations for WAF and real-time logging
Using integrations with BigQuery and Looker, we’ve created 15 chart templates that help you effectively monitor security events on your sites and applications, in real time.
Three ways TLS 1.3 protects origin names
The newest version of Transport Layer Security, TLS 1.3, is faster, more robust, and more responsive than ever before. Explore three ways it will help HTTPS protect origin names for improved…
5 tips for creating a secure DevOps culture
Integrating security into your DevOps cycle isn’t something that happens overnight. Here are five tips for building a culture in which secure DevOps can thrive, enabling your team to build…
TLS with Fastly is now easier and more flexible
Fastly now offers two new TLS services for the trust, flexibility, and scalability customers need to bring the best of the internet to life.
Defend against credential stuffing attacks with proof of work
With attackers using publicly available lists of compromised passwords in an attempt to steal accounts, proof of work is a good way to slow the attackers down.
Trust at scale: Introducing Platform TLS and Subscriber Provided Prefix
Today we’re announcing two new offerings on the Fastly platform: Platform TLS and Subscriber Provided Prefix. Both empower companies to provide fast, secure web experiences to their…
Fastly's Response to SegmentSmack
A remotely exploitable denial-of-service (DoS) attack against the Linux kernel, called SegmentSmack, was made public on August 6th, 2018 as CVE-2018-5390. Fastly was made aware of this…
