181
The web does not need gatekeepers: Cloudflare’s new “signed agents” pitch
Do you register with Google, Amazon or Microsoft to use the web?
New
The latest blog posts to take off on Hacker News. 499 posts.
182
Offline-First Landscape – 2025
Building Marco meant committing to IMAP and cross-platform support. Here is why offline-first proved far harder than we expected, and what we learned.
183
RSS is awesome
Evan briefly discusses rss
184
Aspects of modern HTML/CSS you may not be familiar with
An overview of what makes modern CSS so awesome.
185
Lesser known mobile adtech domains where data is sent
AppGoblin has now run over 40k apps in an emulator, tracking millions of API calls thousands of advertising domains. Unfortunately, some of them are dark, meaning they have no landing page of any kind, and I’m unclear who controls these domains.
186
SSL certificate requirements are becoming obnoxious
SSL requirements are quickly becoming obnoxious.
187
macOS 26 Tahoe's Dead Canary Utility App Icons
These are the not the work of carpenters who care about the backs of the cabinets they’re building. These icons are so bad, they look like the work of untrained “How hard can it be?” dilettante carpenters who only last a few days on the job before sawing off one of their own fingers.
188
189
An illustrated guide to OAuth
OAuth was first introduced in 2007.
190
191
RFC 9839 and Bad Unicode
Unicode is good. If you’re designing a data structure or protocol that has text fields, they should contain Unicode characters encoded in UTF-8. There’s another question, though: “ Which Unicode characters?” The answer is “Not all of them, please exclude some.”
192
The first Media over QUIC CDN: Cloudflare
Media over QUIC: We have a winner! Cloudflare has released a technical preview of their MoQ CDN. Now you can use MoQ at scale with style and grace.
193
Google did not unilaterally decide to kill XSLT
The Web Discourse has been spicy of late, and XSLT is to blame. Well, sort of. It’s complicated.
194
Static sites with Python, uv, Caddy, and Docker
My preferred deployment stack for Python-built static sites.
195
Rolling the dice with CSS random()
Random functions in programming languages are amazing.
196
Why is D3 so Verbose?
Curious why D3.js code looks long and complicated? I quickly explain why D3 is verbose, how it gives developers control, and what makes it powerful for data visualisation.
197
Introduction to AT Protocol
Walkthrough of the various parts and concepts in Bluesky's AT Protocol (ATProto), the types of servers involved and how it all fits together
198
Closer to the Metal: Leaving Playwright for CDP
Why we dropped Playwright and switched to raw CDP for faster, more capable browser automation.
199
Tidewave Web: in-browser coding agent for Rails and Phoenix
Today, we're introducing Tidewave Web for Rails and Phoenix: a coding agent that runs directly in the browser alongside your web application, in your own development environment, with full page and code context.
200
How to Draw a Space Invader
This interactive post will show you how to build your own fleet of space invaders by mixing geometry with randomness and a splash of color.
201
Why Semantic Layers Matter (and how to build one with DuckDB)
Learn what a semantic layer is, why it matters, and how to build a simple one with DuckDB and Ibis using just YAML and Python | Reading time: 22 min read
202
CRLite: Certificate Revocation Checking in Firefox
Firefox is now the first and the only browser to deploy fast and comprehensive certificate revocation checking that does not reveal your browsing activity to anyone (not even to Mozilla). ...
203
Why I'm all-in on Zen Browser
After Arc's pivot to AI left power users behind, I found the browser I actually wanted.
204
An interactive guide to SVG paths
SVG gives us many different primitives to work with, but by far the most powerful is the element. Unfortunately, it’s also the most inscrutable, with its compact Regex-style syntax. In this tutorial, we’ll demystify this infamous element and see some of the cool things we can do with it!
205
It’s OK to block ads (2015)
Over the past couple of months, the practice of ad blocking has received heightened ethical scrutiny. (1,2,3,4) If you’re unfamiliar with the term, “ad blocking” refers to software—usually web browser plug-ins, but increasingly mobile apps—that stop most ads from appearing when you use websites or apps that would…
206
Eliminating JavaScript cold starts on AWS Lambda
Porffor can run on Lambda now!
207
The beauty of a text only webpage
There's something I love about opening a text-only webpage. They're a refuge from the GDPR cookie banners, the trashy ads, the email opt-ins, and the god...
208
Cross-Site Request Forgery
Cross-Site Request Forgery countermeasures can be greatly simplified using request metadata provided by modern browsers.
209
Nginx introduces native support for ACME protocol
Discover how native ACME protocol support simplifies SSL/TLS certificate management by enabling direct configuration within NGINX.
210
This website is for humans
I don't want Google's shitty AI-generated ramen