#web
Wiki 7
- Alternative Frontend Pattern URL-compatible third-party UI over an incumbent service, built to route around stagnation or policy without forking the backend
- Cookie Session Authentication The default browser-session pattern: opaque random ID in an HttpOnly cookie, server-side store maps it to user state
- Coywolf Jon Henshaw's site at coywolf.com — short notes on web tech, RSS, indie web, and SEO-adjacent tooling
- It Works Better in the App (Terence Eden) Terence Eden on Google Calendar's Android app being unable to subscribe to a calendar URL, and why half-finished apps keep sending users back to the web
- JWT for Sessions (Anti-Pattern) Why using JWTs as session tokens is the wrong tool — lifetime mismatch, false statelessness, spec footguns, and what to use instead
- Misago Removes React and Adopts htmx Why Misago dropped React for server-rendered htmx islands, and what its JS bundles did after
- Stop using JWTs (samsch gist) Long-circulating gist arguing JWTs are wrong for sessions; use cookie sessions, and use PASETO for the rare short-lived-token cases
Toolbox 2
- @pierre/diffs Web library for rendering code and diffs, built on Shiki with React and vanilla-JS APIs
- @pierre/trees File-tree renderer for the web with a path-first model, virtualized for very large trees
Books 1
- High Performance Browser Networking Grigorik on the TCP, TLS, HTTP/2 and WebRTC mechanics behind browser page-load speed