The Curious Engineer

All blogs / Security

All content on Seirdy’s Home

seirdy.one

My personal IndieWeb site. I write about and develop software to promote user autonomy. Topics include accessibility, security, privacy, and software freedom.

SecurityFrontend / CSS / browsersWeb development

’20’21’22’23’24’25’26
Posts
211 from 2 Nov 2020 to 26 Jan 2025
Posting
now and then
Kind
personal blog
Feed
https://seirdy.one/atom.xml

2025 2

  1. Certificate Transparency in Firefox
  2. my “notes” section

2024 26

  1. Why I choose Microdata
  2. Scrapers I block (and allow), with explanations
  3. My workouts
  4. A clarification on Google Page Annotations
  5. Your keystroke biometrics are everywhere
  6. Chromium’s influence on Chromium alternatives
  7. Post-OCSP certificate revocation in the Web PKI
  8. my blog
  9. Lose-able keys are a feature
  10. Common Crawl and search engines
  11. On a more selective Google
  12. Caveats to Ungoogled Chromium recommendations
  13. On valid XHTML5 again
  14. Progressive enhancement class feedback
  15. Takeaways from the Google Content Warehouse API documentation leak
  16. Next steps for my search engine collection
  17. Coercion and Windows Recall
  18. Website todo
  19. Classic web badges
  20. Unencrypted connections do mean injection
  21. Partial credit for CSS Naked Day
  22. MDN’s AI Help and lucid lies
  23. Short cache busting fingerprints in Hugo
  24. AI scrapers and upscaling algorithms
  25. Working through forge downtime
  26. Enshittification and user domestication

2023 51

  1. Ideas for filtering fediverse timelines
  2. Some site optimizations
  3. How to build this site
  4. More native than a Web app
  5. Choosing an encrypted DNS protocol
  6. Webrings are already back
  7. Proposal: an HTML element for spoilers
  8. Fixing Tor Browser accessibility
  9. Testimonials
  10. Real name policies
  11. Firefox focus ring regression
  12. Support me
  13. Fediverse defederation considerations
  14. Fedora is pretty stable
  15. WCAG 2.2 and validation
  16. Living dead internet theory
  17. Thoughts on callout semantics
  18. Targeting secure browser profiles
  19. Fingerprinting and customization
  20. Regex feature creep considered non-harmful
  21. Adblocking with a clear conscience
  22. CNET didn’t have to delete old articles
  23. Screen2x and DOM Distiller
  24. Permissions Policy header bloat
  25. “Open Artificial Intelligence” misses the point
  26. Polygot XHTML5
  27. Semantic tone indicators
  28. Blocking certain bots
  29. De-federating P92
  30. Irrevocable consent
  31. I love your website
  32. Problems with BIMI
  33. Thoughts on trademarks
  34. Default text sizes
  35. Defederation is a feature
  36. Approaches to speculative preloading
  37. My Fediverse blocklists
  38. Opting out of LLM indexing
  39. Re: automated workflows for websites
  40. Clang supports wiping call-used registers
  41. ClientHello extension randomization
  42. Fediverse search and consent
  43. An exception to link visibility
  44. ChatGPT reliance considered harmful
  45. UI toolkits and the accessibility gap
  46. Yuescript first impressions
  47. Praise for MoonScript
  48. Motivations for dropping JPEG-XL
  49. Legacy emphasis in HTML
  50. WKD and TOFU
  51. Against chasing growth

2022 120

  1. The problem with automated accessibility checks
  2. EPUB and Web technology
  3. Social implications of crawler neutrality
  4. Coreutil rewrites
  5. The limited utility of the phrase “GNU/Linux”
  6. Fediverse moderation
  7. Politics and 37signals
  8. Blogging as DRY
  9. Accessibility audits and forced colors
  10. Matrix performance problems
  11. Making POSSE work
  12. CSP bug reproduction
  13. Assistive technology support versus textual browsers
  14. Supporting alternative browser engines
  15. An “adapt” HTML prefix
  16. Borrowing from big players
  17. Website security scanners
  18. Google drops Webp2 and JPEG-XL
  19. Using BoringSSL
  20. Route authorization and TLS
  21. Overriding default font size
  22. Profile hydration
  23. DNSLink and SVCB DNS resource records
  24. In defense of QUIC
  25. OpenSSL and QUIC
  26. Kexec considered overkill
  27. Containing web bloat
  28. Re: Privacy Guides email security
  29. Intel ME rootkits
  30. Self signed certificate problems
  31. Reflections on the 2022 Web Almanac’s accessibility findings
  32. Re: blindness awareness month AMA
  33. Intentional telemetry
  34. Limited tracking and consent
  35. Notice box semantics
  36. State of the Tor Uplift
  37. Re: debunking myths about HTTPS
  38. RDF versus semantic HTML
  39. WAI-Adapt fallbacks to equivalent microformats
  40. Re: water usage infographic
  41. In defense of content blocking
  42. Reasons to use Nginx
  43. Problems with Gemini
  44. Reporting API and informed consent
  45. Comparing screen readers
  46. Re: things not available when someone blocks all cookies
  47. Modal editing
  48. Old browsers
  49. Document policy and image compression
  50. User agents set the terms
  51. Feeds
  52. Big Tech nameservers
  53. Filing bugs for things my site breaks
  54. Re: Addition of data for the SerenityOS Browser
  55. Alternative textual browsers
  56. Re: AI-Generated Images from AI-Generated Alt Text
  57. On enforcing HTTPS
  58. Accessibility and search indexes
  59. Scaling back
  60. DoH in Android
  61. Re: what does x percent of issues mean?
  62. Hugo microformats
  63. Re: GH Copilot takes
  64. Capitalizing sentences
  65. Section permalinks
  66. Firefox hardening progress
  67. Details on WCAG 2.2 conformance
  68. Re: spearphishing
  69. Stylometric fingerprinting redux
  70. Re: trying real websites in the SerenityOS browser
  71. Introducing breadcrumbs
  72. OpenSSL replacements
  73. More aspects to contrast
  74. An experiment to test GitHub Copilot's legality
  75. Sourcehut accessibility
  76. Praise for weird browser setups
  77. Re: Give up GitHub
  78. Your WYSIWYG editor
  79. Feed-based social media
  80. User choice and progressive enhancement
  81. Mullvad audit
  82. Two types of privacy
  83. Stylometric fingerprinting resistance
  84. Agent optimization
  85. Welcome to the IndieWeb
  86. Small web frameworks
  87. Browser development moratorium
  88. Software I use
  89. Internet Explorer is almost gone
  90. Dillo repository mirror
  91. Better vote-enabled forums
  92. Flatpak and web browsers
  93. XML adventures
  94. TUIs and accessibility
  95. Minimal website responsiveness
  96. Fediverse greeting
  97. Best practices for inclusive CLIs
  98. Site design standards
  99. all the independent engines I’ve tried
  100. Demise of DTDs
  101. Resize and reflow
  102. On tracker blocking
  103. A layered approach to content blocking
  104. Opt in telemetry
  105. DDG and Bing
  106. JS-enabled engines
  107. Pale Moon
  108. Commodified and commoditized
  109. Things can get better
  110. Prologue to the meta post
  111. On displaying word counts
  112. Soulless Pride
  113. Site refactor
  114. New search box
  115. Signal security
  116. Answer engines
  117. Dark theme woes
  118. Hello notes
  119. Privacy policy
  120. The right thing for the wrong reasons: FLOSS doesn't imply security

2021 7

  1. my setup!
  2. Misinfo about Permissions Policy and FLoC
  3. A look at search engines with their own indexes
  4. Keeping platforms open
  5. WhatsApp and the domestication of users
  6. Resume
  7. Becoming physically immune to brute-force attacks

2020 4

  1. Best practices for inclusive textual websites
  2. Resilient Git, Part 1: Hydra Hosting
  3. Resilient Git, Part 0: Introduction
  4. Hello World

Undated 1

  1. Publickey.asc