Technical notes on Linux, sysadmin, development and devops.
RFC 9729 defines an HTTP authentication scheme that won't even reveal whether a protected resource exists: what it is, the problem it solves, and what it's for.
Passkeys replace passwords with a cryptographic key pair. Since January 2025, the ones saved in Google Password Manager also sync to iPhone and iPad, on top of Android, Windows, macOS, Linux, and…
The IETF has published RFC 9700, the updated Best Current Practice for OAuth 2.0 security: what it is, what changes and why it matters for logins and APIs.
Anthropic has introduced MCP, an open standard for connecting AI assistants to data and tools. What it is, the problem it solves, and why a standard matters, explained simply.
A new CSS feature lets you natively tether one element to another, like a tooltip to its button. What it is, the problem it solves, and why it cuts the reliance on JavaScript libraries.
Chrome enables hybrid post-quantum key exchange by default on desktop. Why it matters, what 'harvest now, decrypt later' means, and why some network gear breaks.