Platform Security
Keys, origins, encryption, request logging, audit trails, MFA and abuse controls — the whole security model in one place.
- 01The key hierarchypk_/sk_, dfd-platform-*, dfd-site-* — three namespaces, one philosophy.
- 02Origin allowlistsPublic keys are useless off-domain: patterns, wildcards, and the rules that refuse to widen.
- 03The encryption modelWhat is ciphertext, what is plaintext, and why each line sits where it does.
- 04Request loggingThe always-on trail behind the logs module.
- 05The audit trailWho did what to a platform — with a name attached, months later.
- 06MFA & staff authEmail second factor for platform staff, stateless by design, enforceable platform-wide.
- 07Honeypots & rate limitingThe public-write endpoints, and how they stay standing.