VirtualTam's bookmarks

1. DNS over HTTPS 2024-11-25

   tags: cryptography/encryption, ietf/rfc, internet/browser/chrome, internet/browser/firefox, network/dns, network/http, network/transport-layer-security

   [ permalink ]

   RFCs:

   • RFC 7858 - Specification for DNS over Transport Layer Security (TLS)
   • RFC 8484 - DNS Queries over HTTPS (DoH)

   Resources:

   • Carsten Strotmann - doh.defaultroutes.de DNS-over-TLS/HTTPS Server
   • DNS over HTTPS - Cloudflare 1.1.1.1 Documentation

   Setting up a DNS-over-HTTPS server:

   • DNS over HTTPS - ArchWiki
   • DNS-over-TLS almost working - Træfik Forum
   • Using Google’s dns.google.com with CoreDNS

   Browser configuration:

   • Configure DoH on your browser - Cloudflare Documentation
   • Using custom DNS-over-HTTPS with CoreDNS and Google Chrome
   • Firefox DNS-over-HTTPS - Firefox Help
2. Jujutsu - A distributed version control system 2024-11-13

   tags: programming/rust, source-code-management/git, source-code-management/jujutsu, source-code-management/mercurial

   [ permalink ]

   • martinvonz/jj
   • Tutorial
   • Jujutsu: A Haven for Mercurial Users at Mozilla
   • Soft skills: jujutsu early feelings
   • Git and jujutsu: in miniature
   • Steve Klabnik's Jujutsu Tutorial
   • Jujutsu VCS Introduction and Patterns
   • Jujutsu Megamerges and jj absorb
3. Web Security Cheat Sheet | Mozilla Infosec 2023-07-23

   tags: network/http, network/http/cookie, network/transport-layer-security, programming/html, programming/javascript, security, web

   [ permalink ]
4. WebAuthn - An API for accessing Public Key Credentials 2023-06-11

   tags: cryptography/public-key-infrastructure, internet/browser, security/authentication

   [ permalink ]

   The Web Authentication API (also known as WebAuthn) is a specification written by the W3C and FIDO, with the participation of Google, Mozilla, Microsoft, Yubico, and others. The API allows servers to register and authenticate users using public key cryptography instead of a password.

   • Guide to Web Authentication
   • Asynchronous Remote Key Generation: An Analysis of Yubico’s Proposal for W3C WebAuthn [PDF]
   • Issue 664630: Web Authentication API for Chrome
   • Bugzilla - [meta] Update WebAuthn JS API to the L1-REC spec
   • keepassxc#1870 - Feature Request: Integration with the Web Authentication API
5. Sidebery - Firefox extension for managing tabs and bookmarks in sidebar 2023-06-03

   tags: internet/browser, internet/browser/firefox, programming/css, user-interface

   [ permalink ]

   • Sidebery – Get this Extension for 🦊 Firefox
   • https://www.reddit.com/r/FirefoxCSS/comments/m4cqse/a_few_sidebery_and_firefox_tweaks/
   • https://www.reddit.com/r/FirefoxCSS/comments/rmi8dg/yet_another_sidebery_setup/
6. Schema.org - Schemas for structured data on the Internet, Web pages, email messages 2022-07-04

   tags: email, google, google/mail, programming/html, programming/json, programming/xml, web

   [ permalink ]

   • https://schema.org/docs/schemas.html
   • https://stackoverflow.com/questions/57371445/schema-org-markup-in-emails
   • https://softwareengineering.stackexchange.com/questions/328567/how-does-microdata-rdfa-compare-to-json-ld/328711#328711
   • https://json-ld.org/
   • https://developer.mozilla.org/en-US/docs/Web/HTML/Microdata
   • https://developers.google.com/gmail/markup/overview
   • https://developers.google.com/gmail/markup/reference/formats/json-ld
   • https://developers.google.com/gmail/markup/reference/formats/microdata
   • https://docs.microsoft.com/en-gb/outlook/actionable-messages/adaptive-card
7. sccache - ccache with cloud storage 2021-10-11

   tags: compiler, compiler/cache, mozilla, programming/c, programming/c++, programming/rust, storage/cache

   [ permalink ]

   • https://blog.mozilla.org/ted/2016/11/21/sccache-mozillas-distributed-compiler-cache-now-written-in-rust/
8. Automating image optimization  |  Web Fundamentals  |  Google Developers 2020-02-13

   tags: command-line, image, image/gif, image/jpeg, image/png, image/svg, performance, programming/script, video, web

   [ permalink ]

   • https://github.com/mozilla/mozjpeg
   • https://github.com/kornelski/pngquant
   • https://github.com/tjko/jpegoptim
   • https://github.com/imagemin/imagemin
   • https://jeremy.codes/blog/bulk-image-optimization-in-bash/
   • https://jeremy.codes/blog/faster-bulk-image-optimization-in-bash/
   • https://rigor.com/blog/optimizing-animated-gifs-with-html5-video
   • https://github.com/svg/svgo
   • https://github.com/jakearchibald/svgomg
9. ssh_scan: A prototype SSH configuration and policy scanner 2019-10-24

   tags: cipher, cryptography/elliptic-curve, cryptography/rsa, mozilla, network/ssh, security

   [ permalink ]

   • https://mozilla.github.io/ssh_scan/
10. rr: lightweight recording & deterministic debugging 2019-07-08

    tags: debugging, debugging/gdb, mozilla, programming/c, programming/c++, programming/go

    [ permalink ]

    • https://github.com/mozilla/rr/
11. helm-secrets: a helm plugin that helps managing secrets with Git workflow 2019-06-18

    tags: cryptography/pgp, linux/container/kubernetes, linux/container/kubernetes/helm, programming/yaml, secret, security, security/password

    [ permalink ]

    • https://github.com/helm/helm/issues/2196
    • https://github.com/mozilla/sops
    • https://medium.com/faun/helm-charts-for-more-complex-projects-and-how-to-secure-them-a1dfde804226
    • https://developer.epages.com/blog/tech-stories/kubernetes-deployments-with-helm-secrets/
    • https://lab.getbase.com/helm-secrets-a-missing-piece-in-kubernetes/
12. sops: Secrets management stinks, use some sops! 2019-06-18

    tags: cryptography/encryption, cryptography/pgp, gpg, linux/container/kubernetes, programming/json, programming/yaml, secret, security

    [ permalink ]

    • https://godoc.org/go.mozilla.org/sops
    • https://jve.linuxwall.info/blog/index.php?post/2015/10/01/Introducing-Sops%3A-an-editor-of-encrypted-file-that-uses-AWS-KMS-and-PGP
13. MIG: Mozilla InvestiGator 2019-05-27

    tags: filesystem, mozilla, network, security, sysadmin

    [ permalink ]

    • https://github.com/mozilla/mig
    • https://j.vehent.org/blog/index.php?post/2015/07/26/Using-Mozilla-Investigator-%28MIG%29-to-detect-unknown-hosts
    • https://j.vehent.org/blog/index.php?post/2015/09/13/Investigating-authorized-keys-across-the-infrastructure-using-MIG
14. Cross-Origin Resource Sharing (CORS) | MDN 2019-01-23

    tags: domain, network/dns, network/http, security, server

    [ permalink ]

    • https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Credentials
    • https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers
    • https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Methods
    • https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin
15. ccache — Compiler cache 2018-10-06

    tags: compiler, compiler/cache, programming/c, programming/c++

    [ permalink ]

    • https://ccache.samba.org/manual/latest.html#_how_ccache_works
    • https://ccache.samba.org/performance.html
    • https://github.com/ccache/ccache
    • https://wiki.archlinux.org/index.php/Ccache
    • https://developer.mozilla.org/en-US/docs/Mozilla/Developer_guide/Build_Instructions/ccache
16. thunderbird-monterail: A set of themes for thunderbird inspired by a Monterail blog post 2018-09-03

    tags: email, ergonomics, linux, mozilla, thunderbird, user-interface

    [ permalink ]

    • https://www.monterail.com/blog/2016/the-power-of-email-clients-why-did-we-redesign-thunderbird
    • https://www.monterail.com/blog/thunderbird-new-interface-redesign-survey
17. http - X-Cache Header Explanation - Stack Overflow 2018-08-31

    tags: header, memory/cache, network/http, performance, storage/cache

    [ permalink ]

    • https://anothersysadmin.wordpress.com/2008/04/22/x-cache-and-x-cache-lookup-headers-explained/
    • https://www.keycdn.com/blog/http-cache-headers/
    • https://web.archive.org/web/20101227032821/http://www.http-stats.com/X-Cache
    • https://developer.mozilla.org/en-US/docs/Web/HTTP/Caching
    • https://www.w3.org/Protocols/rfc2616/rfc2616-sec13.html
18. WebRTC - Real-Time Communication for browsers and mobile apps 2018-07-25

    tags: communication, internet/browser, mobile, network

    [ permalink ]

    • https://github.com/webrtc/apprtc
    • https://github.com/webrtc/adapter
    • https://webrtc.github.io/samples/
    • https://developer.mozilla.org/en-US/docs/Web/API/WebRTC_API
19. Wladimir Palant's notes: Master password in Firefox or Thunderbird? Do not bother! 2018-05-07

    tags: internet/browser/firefox, mozilla, security, security/password, thunderbird

    [ permalink ]

    • https://cynosureprime.blogspot.fr/2017/08/320-million-hashes-exposed.html
    • https://blog.codinghorror.com/hacker-hack-thyself/
    • https://www.microsoft.com/en-us/research/publication/a-large-scale-study-of-web-password-habits/
20. Content Security Policy CSP Reference & Examples 2018-02-07

    tags: internet/browser, privacy, security, web, xss

    [ permalink ]

    • https://en.wikipedia.org/wiki/Content_Security_Policy
    • https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
    • https://www.owasp.org/index.php/Content_Security_Policy
    • https://developers.google.com/web/fundamentals/security/csp/