Tenant Offboarding Is a Data-Deletion Problem: The GDPR Erasure Checklist Across Volumes, Snapshots, Logs, Registries, and Backups
Deleting a churned tenant's namespace takes ninety seconds. Erasing their personal data from volumes, snapshots, logs, registries, backups, DNS, and metrics takes a checklist — here it is, with each store's deletion mechanism, retention clock, and an honest accounting of what cannot be deleted.
Caddy Rotates Your ECH Keys Now: What It Takes to Hide Every Tenant's SNI Behind Shared IPs
Caddy 2.11.1 rotates Encrypted Client Hello keys automatically. Here is what it takes to hide every tenant's SNI behind shared IPs — the config, the DNS plumbing, and the gaps that remain.
Render's CLI Now Phones Home by Default: What Opt-Out Telemetry Means for Trusting Your Deploy Tool
Render CLI v2.26.0 collects usage telemetry by default. This breakdown covers exactly what it sends, how to opt out, the CI disclosure gap in its notice design, and the standard credential-holding CLIs should meet.
Private x402 Payments: What Mind Network’s x402z Adds—and What It Doesn’t
Mind Network’s x402z adds FHE-backed confidential value handling to x402 agent payments. See what it can protect, what still leaks, and the controls a production deployment needs.
The .self TLD Bid: What a Human-First Domain Would—and Wouldn't—Change for Self-Hosted Apps
What the proposed .self TLD could change for self-hosted apps, what still requires portable DNS and TLS automation, and the policy questions a public-good registry must answer.
OVHcloud's SecNumCloud GA in June 2026: Why 'EU-Headquartered' Isn't a Sovereignty Certification
OVHcloud's SecNumCloud-qualified instances went GA in June 2026 on ANSSI's 360-control visa. What certified immunity, operational separation, and capital caps require beyond an EU headquarters — and when your PaaS needs to name the visa.
Analytics for the Price of Disk: Self-Hosting Umami as a Tenant Workload Instead of Paying Per Event
Product analytics is just a web service plus a Postgres table. A dollar-for-dollar comparison of Plausible, PostHog, and GA4 bills at 100K, 1M, and 10M events against running Umami or Plausible CE as a tenant workload where 10 million pageviews cost cents in disk.
ZKsync's Institutional Bet: How Five Regional Banks With $600B in Deposits Are Going On-Chain
ZKsync is abandoning the consumer DeFi speed race in favor of regulated financial infrastructure. Five U.S. regional banks with $600 billion in deposits have chosen ZKsync's Prividium privacy rollup to build the Cari Network, a tokenized deposit platform targeting customer launch in Q4 2026.
Web3's Privacy Architecture War: ZK, FHE, and TEE in 2026
ZK, FHE, and TEE are no longer competing paradigms — they're converging into hybrid architectures. The TEE.fail crisis, Zama's unicorn valuation, and institutional regulatory demands reshaped Web3 privacy infrastructure in 2025–2026.