Randhana https://randhana.com/blog Thoughtful work. Real impact. en-us pulathisi.kariyawasam@gmail.com (Pulathisi Kariyawasam) pulathisi.kariyawasam@gmail.com (Pulathisi Kariyawasam) Sat, 25 Jan 2025 00:00:00 GMT https://randhana.com/blog/api-types-and-authentication-methods Understanding API Types and Authentication Methods https://randhana.com/blog/api-types-and-authentication-methods A comprehensive guide to different types of APIs and authentication methods used in modern web development, including detailed examples and best practices. Sat, 25 Jan 2025 00:00:00 GMT pulathisi.kariyawasam@gmail.com (Pulathisi Kariyawasam) apiauthenticationsecurityweb developmentbackend https://randhana.com/blog/https-isnt-always-private-the-corporate-mitm-you-didnt-know-about Why the Lock Icon Lies on a Company Laptop https://randhana.com/blog/https-isnt-always-private-the-corporate-mitm-you-didnt-know-about HTTPS protects your traffic from outsiders. But on a company laptop, the endpoint protection software is not an outsider — and that changes everything. Thu, 11 Jun 2026 00:00:00 GMT pulathisi.kariyawasam@gmail.com (Pulathisi Kariyawasam) securitytlsnetworking https://randhana.com/blog/production-grade-secure-authentication-api Production-Grade Secure Authentication API: Technical Architecture & Security Implementation https://randhana.com/blog/production-grade-secure-authentication-api Technical showcase of a production-ready authentication API featuring JWT with refresh token rotation, RBAC, Redis rate limiting, comprehensive security headers, audit logging, and automated CI/CD deployment. Sat, 27 Dec 2025 00:00:00 GMT pulathisi.kariyawasam@gmail.com (Pulathisi Kariyawasam) nodejstypescriptsecurityauthenticationjwtdockerredispostgresqldevops https://randhana.com/blog/server-monitor-agentless-linux-monitoring Server Monitor: Building an Agentless, Self-Hosted Monitor for Linux Servers https://randhana.com/blog/server-monitor-agentless-linux-monitoring How I built Server Monitor - a self-hosted tool that watches a group of Linux servers over plain SSH, with nothing installed on them and no dependency on outside services - with AI-assisted development. Sun, 11 Oct 2026 00:00:00 GMT pulathisi.kariyawasam@gmail.com (Pulathisi Kariyawasam) linuxpythonfastapisshsqlitemonitoringsecurityai-assisted-coding https://randhana.com/blog/ssl_tls_uncovered_real_world_insights SSL/TLS in Production: Deep Dive into Certificates, Private Keys, and Deployment https://randhana.com/blog/ssl_tls_uncovered_real_world_insights A detailed discussion of SSL/TLS in production: private keys, certificates, self-signed vs CA certificates, Let's Encrypt, deployment best practices, and real-world considerations. Sat, 20 Dec 2025 00:00:00 GMT pulathisi.kariyawasam@gmail.com (Pulathisi Kariyawasam) sslsecuritycertificatesencryption https://randhana.com/blog/understanding-diffie-hellman-key-exchange Diffie-Hellman Explained: How Two People Share Secrets Over Public Channels https://randhana.com/blog/understanding-diffie-hellman-key-exchange A step-by-step mathematical deep-dive into how Diffie-Hellman key exchange works - from simple paint mixing analogies to the discrete logarithm problem that makes it unbreakable. Fri, 08 May 2026 00:00:00 GMT pulathisi.kariyawasam@gmail.com (Pulathisi Kariyawasam) cryptographydiffie-hellmanmathematicskey-exchangesecurityencryptionmodular-arithmetic