Topic: tls

Node TLS errors behind antivirus or a proxy

When npm, fetch or gcloud fail TLS verification on one machine only, something is intercepting HTTPS and re-signing it. How to see whose certificate you are being handed, why Node ignores the Windows store by default, and the one flag that fixes it safely.

Cloudflare DNS-only vs proxied for Cloud Run

Cloud Run domain mappings issue their own certificate and expect to see the domain resolve directly to Google. What breaks when Cloudflare proxies the records, when proxying is worth it anyway, and a safe way to bulk-import DNS records for a new site.