How Plex is doing HTTPS for all its users
This week Plex , a self-hosted media server, announced that they now offer TLS to secure all connections, including those to the user’s servers. This is actually pretty interesting.
Topics /
The most popular blog posts about web & frontend on Hacker News. 4,615 posts.
This week Plex , a self-hosted media server, announced that they now offer TLS to secure all connections, including those to the user’s servers. This is actually pretty interesting.
A primer on the oft-confusing BEM notation for CSS
If you'd like to help translate this comic, click here to see what translations have already been done! If your language hasn't been done yet, send a Pull Request to that repo with your translated comic, or send it to . Thank you! 💖
I. A lot of libertarians and anarcho-capitalists envision a future of small corporate states competing for migrants and capital by trying to have the best policies. But the Internet is about as clo…
lloyd.io is the personal website of Lloyd Hilaiel, a software engineer who lives in Denver, Colorado.
FOUT is what I’m calling the flash of unstyled text that you get while using @font-face in Firefox and Opera.
When a browser connects to an HTTPS site it receives signed certificates which allow it to verify that it's really connecting to the domain that it should be connecting to. In those certificates are pointers to services, run by the Certificate Authorities (CAs) that issued the certificate, that allow the browser to…
Elaborate usability tests are a waste of resources. The best results come from testing no more than 5 users and running as many small tests as you can afford.
Firefox is sometimes recommended as a supposedly more secure browser because of its parent company's privacy practices. This article explains why this notion is not true and enumerates a number of security weaknesses in Firefox's security model when compared to Chromium. In particular, it covers the less granular…
People often choose Redux before they need it. “What if our app doesn’t scale without it?” Later, developers frown at the indirection Redux…
Version 1.1, May 18 2001. Changed section orders for better organization. (Thanks, Raffi). Clarified "metrics" in 2.6 (Thanks, Andy).
Update 2014.12.17: Now that SSL is encouraged for everyone and doesn’t have performance concerns , this technique is now an anti-pattern . If the asset you need is available on SSL, then always use the https:// asset.
I’ve been following some discussions about the future of software applications, and a phrase that came up in my dinner with Robb Beal has been echoing in my mind. What it comes down to is this: if you want to develop software, you can build for the Web and/or Unix and/or OSS platforms; or alternatively, you can be a…
Over the last several years we’ve seen a whole range of ideas regarding the architecture of systems. These include:
A small number of popular JavaScript frameworks and libraries account for a substantial portion of the network, battery, and time budgets of users of the contemporary Web. Many applications include these libraries even if they only use a small portion of the functionality they provide. Large improvements seem possible…
It seems (according to one guru , but coming from this source, it’s a left-handed compliment) that JavaScript is finally popular .
Note: The gzipped and Zopflinated file sizes refer to the total byte size of the file after compressing it using gzip or Zopfli with the default settings . For gzip, this boils down to gzip -6 file.js — the default compression level is 6 on a scale from 1 (fastest, but less compression) to 9 (slowest, but best…
Does JavaScript use UCS-2 or UTF-16 encoding? Since I couldn’t find a definitive answer to this question anywhere, I decided to look into it. The answer depends on what you’re referring to: the JavaScript engine, or JavaScript at the language level.
Thomas Ptacek laid out a number of arguments against DNSSEC recently (and in a follow up ). We don't fully agree on everything, but it did prompt me to write why, even if you assume DNSSEC, DANE (the standard for speaking about the intersection of TLS and DNSSEC) is not a foregone conclusion in web browsers.
Anyone remember Color cycling from the 90s? This was a technology often used in 8-bit video games of the era, to achieve interesting visual effects by cycling (shifting) the color palette. Back then video cards could only render 256 colors at a time,...
Explaining the Dependency Injection pattern, by contrasting it with Service Locator. The choice between them is less important than the principle of separating configuration from use.
Google recently announced that images in emails will be displayed automatically by default to Gmail users, thanks to an anonymizing proxy operated by them.
Posted by Roy T. Fielding under software architecture , web architecture [51] Comments
Noteworthy display sizes of monitors, PCs, notebooks, tablets, smartphones, smartwatches and HMDs. Link background color takes into account typical viewing distance: