Security on Abdelbaki Ben Elhaj Slimene

Making 'Nothing Leaves Your Browser' a Promise the Browser Enforces

Mon, 02 Nov 2026 00:00:00 +0000

Developers paste things into online tools that they would never put in a public chat: a JWT from staging, a JSON payload with customer data, a connection string with the password still in it. Every “format your JSON online” site says it doesn’t store what you paste. Almost none of them can prove it, and you can’t tell the difference between a site that doesn’t upload your input and a site that just says so.

Migrating from SMTP to AWS SES with IAM Roles: A Security-First Approach to Email in Spring Boot

Wed, 28 Jan 2026 00:00:00 +0000

Sending emails is a fundamental requirement for most applications. Whether it’s transactional notifications, alerts, or user communications, we need a reliable and secure way to dispatch messages.

In this article, I’ll walk through our migration from traditional SMTP authentication to AWS SES with IAM role-based authentication, explaining why this shift represents a significant security improvement.

Photo by CHUTTERSNAP on Unsplash

The Traditional Approach: SMTP with Credentials

For years, the standard way to send emails from a Spring Boot application has been through SMTP with username and password authentication:

Presigned URLs in AWS S3: Secure File Upload and Download

Mon, 09 Oct 2023 00:00:00 +0000

Amazon Simple Storage Service (S3) is an object storage service offered by Amazon Web Services (AWS). It allows users to store and retrieve data from anywhere on the web. While you can manage S3 objects directly through the AWS Management Console and the AWS SDKs with dedicated permissions, there are situations where you need to securely grant temporary access to your S3 objects without exposing your AWS credentials. This is where presigned URLs come into play.