Today, there's no way to audit a site’s client-side code as it changes, making it hard to trust sites that use cryptography. We preview a specification we coauthored that adds auditability to the web.
Introducing WEBCAT: Web-based Code Assurance and Transparency
In this post, we introduce Web-based Code Assurance and Transparency, a project that supports verifiable in-browser code for single-page browser applications. Along with this post, we are publishing the WEBCAT project repository; follow-up posts will provide more detailed information.
Which browsers are best for privacy?
An open-source privacy audit of popular web browsers.
Introducing EmDash — the spiritual successor to WordPress that solves plugin security
Today we are launching the beta of EmDash, a full-stack serverless JavaScript CMS built on Astro 6.0. It combines the features of a traditional CMS with modern security, running plugins in sandboxed Worker isolates.
Web Crypto’s SubtleCrypto: A Masterclass in Developer Hostility and How It Strangles the Modern Web
Not Subtle, Just Sabotage — An API Against the Web
WEBCAT - Verifiable Code for the Web
WEBCAT helps people trust the websites they use by making it possible to verify the code running in their browser.
How Baseline Can Help You Ship Less JavaScript — Smashing Magazine
The gap between “you need a library for this” and “the browser does this” keeps closing. A practical guide to auditing your dependencies and finding what the web platform can now handle for you.
The many, many, many JavaScript runtimes of the last decade
This last decade has seen an inundation of new JavaScript runtimes (and engines in equal measure), enabling us to run JavaScript in all manner of contexts...
Building a Browser-Native Verification Stack for Tinfoil
Learn how we built a browser-based confidentiality and integrity verifier with implementations of browser-native Sigstore and TUF libraries.
Lighthouse | Chrome for Developers
Automate web performance audits with Lighthouse
Original implementation of Javascript in CL
Thanks to a tweet from Tiago Charters de Azevedo, I learned today that Mozilla’s CVS tree still contains the original implementation of Javascript written in Common Lisp. I always found inter…
Google’s nightmare “Web Integrity API” wants a DRM gatekeeper for the web
It's just a "proposal," but it's also being prototyped inside Chrome right now.
Websites have a new way to spy on visitors: Analyzing their SSD activity
Telltale SSD activity can be measured in the browser using simple JavaScript.
Web Engines Hackfest 2025
A brief history of JavaScript | Deno
In 30 years, JavaScript went from being a little scripting language to one of the world's most popular. Here are key moments to show how it has evolved and where it is headed.
Learn JavaScript Online - Courses for Beginners - javascript.com
JavaScript.com is a resource for the JavaScript community. You will find resources and examples for JavaScript beginners as well as support for JavaScript experts. Learn JavaScript or free with our easy to use input output machine.
