VirtualTam's bookmarks

1. DNS over HTTPS 2024-11-25

   tags: cryptography/encryption, ietf/rfc, internet/browser/chrome, internet/browser/firefox, network/dns, network/http, network/transport-layer-security

   [ permalink ]

   RFCs:

   • RFC 7858 - Specification for DNS over Transport Layer Security (TLS)
   • RFC 8484 - DNS Queries over HTTPS (DoH)

   Resources:

   • Carsten Strotmann - doh.defaultroutes.de DNS-over-TLS/HTTPS Server
   • DNS over HTTPS - Cloudflare 1.1.1.1 Documentation

   Setting up a DNS-over-HTTPS server:

   • DNS over HTTPS - ArchWiki
   • DNS-over-TLS almost working - Træfik Forum
   • Using Google’s dns.google.com with CoreDNS

   Browser configuration:

   • Configure DoH on your browser - Cloudflare Documentation
   • Using custom DNS-over-HTTPS with CoreDNS and Google Chrome
   • Firefox DNS-over-HTTPS - Firefox Help
2. passkeys - Hello passkeys! Goodbye passwords. 2023-06-11

   tags: cryptography/public-key-infrastructure, internet/browser/chrome, internet/browser/firefox, mobile/android, mobile/ios, security/authentication

   [ permalink ]

   Passkeys are a replacement for passwords that provide faster, easier, and more secure sign-ins to websites and apps across a user’s devices. Unlike passwords, passkeys are always strong and phishing-resistant.

   • https://fidoalliance.org/passkeys/
   • Apple Developer - Passkeys Overview
   • Apple Support - About the security of passkeys
   • Google Identity - Passwordless login with passkeys
   • Google Blog - The beginning of the end of the password
   • Google Security Blog - So long passwords, thanks for all the phish
   • Chromium BLog - Introducing passkeys in Chrome
   • Tailscale doesn't want your password
   • Tailscale - Custom OIDC Providers
   • YubiKeys, passkeys and the future of modern authentication
   • A Yubico FAQ about passkeys
   • Why Passkeys Will Be Simpler and More Secure Than Passwords
   • Passkeys: A shattered dream
3. WebAuthn - An API for accessing Public Key Credentials 2023-06-11

   tags: cryptography/public-key-infrastructure, internet/browser, security/authentication

   [ permalink ]

   The Web Authentication API (also known as WebAuthn) is a specification written by the W3C and FIDO, with the participation of Google, Mozilla, Microsoft, Yubico, and others. The API allows servers to register and authenticate users using public key cryptography instead of a password.

   • Guide to Web Authentication
   • Asynchronous Remote Key Generation: An Analysis of Yubico’s Proposal for W3C WebAuthn [PDF]
   • Issue 664630: Web Authentication API for Chrome
   • Bugzilla - [meta] Update WebAuthn JS API to the L1-REC spec
   • keepassxc#1870 - Feature Request: Integration with the Web Authentication API
4. badssl.com - Memorable site for testing clients against bad SSL configs 2023-02-18

   tags: cryptography/certificate, internet/browser/chrome, network/http, network/transport-layer-security

   [ permalink ]

   • https://github.com/chromium/badssl.com
5. Browser Extensions 2017-10-06

   tags: extension, internet/browser, internet/browser/chrome, internet/browser/firefox

   [ permalink ]

   • https://developer.chrome.com/extensions
   • https://developer.mozilla.org/en-US/Add-ons/WebExtensions
   • https://github.com/browserext/browserext/
   • https://dev.to/scleriot/build-a-firefox-extension-step-by-step-5dbl
6. My $169 development Chromebook 2017-07-28

   tags: cheap, internet/browser/chrome, laptop, linux, operating-system, privacy, security

   [ permalink ]
7. Firefox: change a loading page's background color 2014-10-17

   tags: color, internet/browser/firefox, mozilla, programming/css, theme

   [ permalink ]

   ~/.mozilla/firefox/PROFILE/chrome/userContent.css

   @-moz-document url-prefix(about:blank) {*{background-color:#4b4b4b;}}