Today, there's no way to audit a site’s client-side code as it changes, making it hard to trust sites that use cryptography. We preview a specification we coauthored that adds auditability to the web.
Introducing WEBCAT: Web-based Code Assurance and Transparency
In this post, we introduce Web-based Code Assurance and Transparency, a project that supports verifiable in-browser code for single-page browser applications. Along with this post, we are publishing the WEBCAT project repository; follow-up posts will provide more detailed information.
Which browsers are best for privacy?
An open-source privacy audit of popular web browsers.
Introducing EmDash — the spiritual successor to WordPress that solves plugin security
Today we are launching the beta of EmDash, a full-stack serverless JavaScript CMS built on Astro 6.0. It combines the features of a traditional CMS with modern security, running plugins in sandboxed Worker isolates.
Web Crypto’s SubtleCrypto: A Masterclass in Developer Hostility and How It Strangles the Modern Web
Not Subtle, Just Sabotage — An API Against the Web
WEBCAT - Verifiable Code for the Web
WEBCAT helps people trust the websites they use by making it possible to verify the code running in their browser.
How Baseline Can Help You Ship Less JavaScript — Smashing Magazine
The gap between “you need a library for this” and “the browser does this” keeps closing. A practical guide to auditing your dependencies and finding what the web platform can now handle for you.
The many, many, many JavaScript runtimes of the last decade
This last decade has seen an inundation of new JavaScript runtimes (and engines in equal measure), enabling us to run JavaScript in all manner of contexts...
State of JavaScript 2022
The 2022 edition of the annual survey about the latest trends in the JavaScript ecosystem.
ESLint Joins The jQuery Foundation - ESLint - Pluggable JavaScript Linter
A pluggable and configurable linter tool for identifying and reporting on patterns in JavaScript. Maintain your code quality with ease.
Building a Browser-Native Verification Stack for Tinfoil
Learn how we built a browser-based confidentiality and integrity verifier with implementations of browser-native Sigstore and TUF libraries.
Lighthouse | Chrome for Developers
Automate web performance audits with Lighthouse
State of JS 2020
The annual survey about the latest trends in the JavaScript ecosystem.
Original implementation of Javascript in CL
Thanks to a tweet from Tiago Charters de Azevedo, I learned today that Mozilla’s CVS tree still contains the original implementation of Javascript written in Common Lisp. I always found inter…
Google’s nightmare “Web Integrity API” wants a DRM gatekeeper for the web
It's just a "proposal," but it's also being prototyped inside Chrome right now.
