Web Storage: the lesser evil for session tokens
I was recently asked whether it was safe to store session tokens using Web Storage (sessionStorage/localStorage) instead of cookies. Upon googling this I found the top results nearly all assert that w
The latest blog posts to take off on Hacker News. 467 posts.
I was recently asked whether it was safe to store session tokens using Web Storage (sessionStorage/localStorage) instead of cookies. Upon googling this I found the top results nearly all assert that w
The Tor Browser Team is proud to announce the first stable release in the 6.0 series. This...
The first release of WordPress is now available.
There is a pretty good comment on Hacker News (of all places) by nostrademons explaining why the DOM is not slow . Basically, all the DOM mutation operations are pretty trivial. Inserting and removing nodes, moving them around, setting an attribute, etc. It’s layout that takes a while and layout can be synchronously…
Killing the web to save it.
Free and open source webmail software for the masses, written in PHP
By the end of this year Chrome will begin ignoring Flash as Google takes another step towards removing the "final Plugin" by replacing Flash with HTML5.
Lately, we have seen a lot of people struggling with CSS, from beginners to seasoned developers. Some of them don't like the way it works, and wonder if replacing CSS ...
Bringing Google Play — the most popular app store in the world — to Chromebooks.
Online tracking: A 1-million-site measurement and analysis is the largest and most detailed measurement of online tracking to date. We measure stateful (cookie-based) and stateless (fingerprinting-based) tracking, the effect of browser privacy tools, and "cookie syncing". This measurement is made possible by our web…
I find myself tasked with polishing and publishing a little custom JSON-encoded language. It’s harder than it ought to be.
Web performance rules invented for desktop web access need to be revised for the mobile era.
Chakra, the recently open-sourced JavaScript engine that powers Microsoft Edge and Universal Windows applications, has been pushing the leading edge of ECMAScript language support. Most of ES2015 (aka ES6) language support is already available in Edge, and last week’s Windows Insider Preview build 14342 brings more…
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
Chrome drops NPN for ALPN on May 31st, requiring OpenSSL 1.0.2+. CentOS, Debian, and most Ubuntu versions can't support it, breaking HTTP/2 for millions.
EFF is proud to introduce Certbot, a powerful tool to help websites encrypt their traffic. Certbot is the next iteration of the Let's Encrypt Client; it obtains TLS/SSL certificates and can automatically configure HTTPS encryption on your server. It's still in beta for now, but we plan to release...
Dear member of the World Wide Web Consortium's Advisory Committee, You may have heard that over the past year we've been trying to insert legal safeguards into the Encrypted Media Extensions project at the W3C, which standardizes streaming video DRM. We've previously been opposed to the W3C...
Take a moment to go back in time with me, back to when life was simpler and the biggest threat to humanity was Y2k…
About one year ago our friends at Facebook brought an interesting issue to the IETF HTTP Working Group - a lot (20%!) of their transaction...
Once upon a time, there were two major browsers that virtually everyone used: Netscape and Internet Explorer, locked in a death-battle for the future of the Web. They went to enormous lengths to tempt Web publishers to optimize their sites to work best inside their windows, and hoped that users...