Handling Cookies is a Minefield
Discrepancies in how browsers and libraries handle HTTP cookies, and the problems caused by such things.
(untitled)
Latest posts
Refresh vs. Long-lived Access Tokens
Refresh vs. Long-lived Access Tokens
Cache-Control Recommendations
A simple set of Cache-Control recommendations
Analysis of the Alexa Top 1M sites (April 2019)
Summary of changes in the Alexa Top 1M since February of 2018
Lore of MTG - Battlemage
Extracted lore from Magic the Gathering - BattleMage
Analysis of the Alexa Top 1M sites (Feb 2018)
Continual improvement in the Alexa Top 1 Million sites
HTTP Status Code Handling
HTTP Status Code Handling
Analysis of the Alexa Top 1M sites (June 2017)
Just how bad is security in the top one million sites? Better!
Recording MTGO in 4K with OBS
How to record in 4k using OBS
Understanding CORS
Understanding CORS
Analysis of the Alexa Top 1M sites (October 2016)
Just how bad is security in the top one million sites? Better!
Let's Encrypt now supports IDNs
Let's Encrypt now supports internationalized domain names
Observatory by Mozilla: Making the Web Safer
Announcing the release of Observatory by Mozilla
X-Content-Type-Options + passive content?
Does X-Content-Type-Options work with passive content?
Offensive playmats in Magic
Recent judge panel on women in Magic and playmats therein
Analysis of CSP in the Alexa Top 1M sites (April 2016)
Just how bad is CSP in the top one million sites? Very bad.
Analysis of the Alexa Top 1M sites (April 2016)
Just how bad is security in the top one million sites? Very bad.
SVG + CSP: An Unappetizing Alphabet Soup
SVG can fail strangely, with CSP
Creating Ascending Ringtones for iOS / iPhone
How to create an ascending ringtones for iOS / iPhone
Introduction to Let's Encrypt
Watch me talk about how Let's Encrypt is promising to make the internet a safer place for everyone.
Fifteen Years is a Solid Run
After fifteen years of being on twoevils.org , I've decided that it was time to move to a new domain.
CSP on addons.mozilla.org (AMO)
Implementing CSP on AMO took six years, but we did it!