Category
Web fundamentals, system design, and practical notes on how the stack works under the hood
10 articles
A practical guide to OAuth 2.0 and OpenID Connect covering authorization code flow, PKCE, ID tokens, scopes, social login, redirect URI security, and production mistakes.
A practical comparison of server-side sessions and JWT authentication, covering storage, cookies, expiry, revocation, refresh-token rotation, browser security, and production tradeoffs.
A practical guide to authentication and authorization covering sessions, JWTs, access tokens, refresh tokens, RBAC, ABAC, tenant boundaries, and production access-control mistakes.
A practical, layer-by-layer framework for debugging production web issues: slow pages, failed requests, redirect loops, DNS problems, TLS errors, CORS failures, and hydration mismatches.
A practical guide to how browsers turn HTML, CSS, and JavaScript into pixels, covering the DOM, CSSOM, render tree, layout, paint, compositing, hydration, and Core Web Vitals.
A practical guide to what happens inside a server once a request arrives, covering reverse proxies, load balancers, middleware, routing, auth, rate limiting, database access, and observability.
A practical guide to TLS and HTTPS, covering the TLS 1.3 handshake, certificate chains, SNI, ALPN, cipher suites, forward secrecy, HSTS, OCSP, and how to debug common SSL failures.
A deep, practical guide to DNS covering the resolution path, record types, TTL and propagation, DNSSEC, split-horizon DNS, and how to debug DNS issues in production.
A deep, practical guide to HTTP covering methods, status codes, headers, caching strategy, cookies, CORS, and content negotiation, from fundamentals to production debugging.
A practical map of what happens after you press Enter, from URL parsing and DNS to HTTP, server processing, browser rendering, hydration, and debugging.