VirtualTam's bookmarks

1. h2c Smuggling: Request Smuggling Via HTTP/2 Cleartext (h2c) 2024-11-04

   tags: network/http, network/reverse-proxy, programming/go, security, websocket

   [ permalink ]

   • BishopFox/h2csmuggler
2. feed reader best practices | Rachel By The Bay 2024-10-26

   tags: feed, network/http, network/http/header, personal-knowledge/blog, storage/cache, web/syndication

   [ permalink ]

   Test feed:

   • feed reader score project
   • A sysadmin's rant about feed readers and crawlers
   • Feeds, updates, 200s, 304s, and now 429s
   • So many feed readers, so many bizarre behaviors
   • The feed reader score service is now online

   RFCs:

   • RFC 1945 - Hypertext Transfer Protocol - HTTP/1.0 - If-Modified-Since
   • RFC 7232 - Hypertext Transfer Protocol (HTTP/1.1): Conditional Requests - Entity Tag (ETag)
   • RFC 9110 - HTTP Semantics

   Related:

   • Bret Simmons - NetNewsWire and Conditional GET Issues
   • John Brayton - Feed Polling for Unread Cloud
   • Jeff Kaufman - Looking at RSS User-Agents
   • Chris Siebenmann - The case of the very old If-Modified-Since HTTP header
   • ETag and HTTP caching
   • HTTP Conditional Requests Explained
   • Caching - What takes precedence: the ETag or Last-Modified HTTP header?
3. Stirling-PDF - Self-hosted PDF manipulation tool 2024-06-22

   tags: image/optical-character-recognition, linux/container/docker, network/http, pdf, programming/java

   [ permalink ]
4. Swift on Server 2024-06-12

   tags: cloud/aws, linux/container/docker, network/grpc, network/http, network/http/openapi, programming/swift

   [ permalink ]

   • swift-server
   • Packaging Applications for Deployment
   • swift-server/swift-openapi-lambda
   • swift-server/swift-aws-lambda-runtime
   • swift-server/swift-aws-lambda-events
   • grpc/grpc-swift
5. Adventures In Rust: Bringing Exchange Support To Thunderbird 2024-06-04

   tags: email, microsoft/exchange, network/http, programming/rust, programming/xml, thunderbird

   [ permalink ]
6. smallstep/certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management 2024-05-27

   tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/http-server/traefik, network/reverse-proxy, network/transport-layer-security, programming/go

   [ permalink ]

   • Run a private online TLS certificate authority in a Docker container
   • Configure popular ACME clients to use a private CA with the ACME protocol
   • Run your own private CA & ACME server using step-ca
   • Build a Tiny Certificate Authority For Your Homelab
7. The Copenhagen Book - General guidelines on implementing authentication and authorization in web applications 2024-04-05

   tags: cryptography/hash, memory/cache, network/http, network/http/cookie, programming/go, security/authentication, security/authorization, security/oauth, security/password

   [ permalink ]

   • pilcrowOnPaper/copenhagen
8. TypeSpec - A language for defining cloud service APIs and shapes 2024-04-05

   tags: documentation, network/grpc, network/http, programming/api/rest, programming/json, programming/typescript, protocol-buffers

   [ permalink ]

   • microsoft/typespec
9. Fly.io - JIT Wireguard 2024-03-31

   tags: database/sqlite, network/http, network/udp, network/vpn/wireguard, programming/go

   [ permalink ]

   What if, instead of pushing [user] configs to gateways, we had the gateways pull them from our API on demand?

   • Linux Kernel - Introduction to Netlink
   • tqbf/wg_init.go - Wireguard initiator-responder identity example
10. /r/webdev - Self-hosted web analytics: plausible, umami, matomo & more 2024-03-31

    tags: internet/analytics, network/http, open-source, self-hosting

    [ permalink ]

    • /r/selfhosted - Most reliable Google Analytics alternative?
    • Ackee
    • GoatCounter
    • Matomo
    • Offen Fair Web Analytics
    • Plausible Analytics
    • Umami
11. dev-sec/ansible-collection-hardening - Hardening for Linux, SSH, Apache HTTPD, Nginx, MySQL 2024-03-31

    tags: configuration-management/ansible, database/mysql, linux, network/http-server/apache-httpd, network/http-server/nginx, network/ssh

    [ permalink ]
12. Standard Webhooks - Open source tools and guidelines to send webhooks easily, securely and reliably 2024-02-28

    tags: network/http, programming/json

    [ permalink ]

    • standard-webhooks/standard-webhooks
    • Specification
13. How to Redirect a Domain to Another Domain with Traefik 2024-01-21

    tags: network/http, network/http-server/traefik, network/reverse-proxy

    [ permalink ]

    • Traefik Middleware - RedirectRegex
14. go-http-metrics - Modular HTTP middleware to measure HTTP requests 2023-07-26

    tags: network/http, observability/metrics, observability/time-series/prometheus, programming/go

    [ permalink ]

    • Expose Prometheus metrics in a separate port in golang
15. HAProxy - TLS Termination Setup 2023-07-24

    tags: cryptography/encryption, network/http, network/http-server/haproxy, network/reverse-proxy, network/transport-layer-security, security

    [ permalink ]

    • Traffic Routing - Rewrite Requests
    • Client IP Preservation - X-Forwarded-For
    • HAProxy & HTTP Strict Transport Security (HSTS)
    • Secure Cookies Using HAProxy Enterprise
16. Web Security Cheat Sheet | Mozilla Infosec 2023-07-23

    tags: network/http, network/http/cookie, network/transport-layer-security, programming/html, programming/javascript, security, web

    [ permalink ]
17. go-httpbin - A reasonably complete and well-tested golang port of the httpbin service 2023-06-11

    tags: linux/container/docker, network/http, programming/go

    [ permalink ]
18. OpenSSL Cookbook 2023-05-31

    tags: cryptography/certificate, network/http, network/transport-layer-security, openssl

    [ permalink ]

    The definitive guide to using the OpenSSL command line for configuration and testing.

    Topics covered in this book include:

    • key and certificate management,
    • server configuration,
    • a step by step guide to creating a private CA,
    • testing of online services.
19. Debugging Certificate Errors 2023-02-18

    tags: cryptography/certificate, curl, network/http, network/transport-layer-security, openssl

    [ permalink ]

    • https://www.netmeister.org/whatsthatcert/
20. misbehaving.site: a less well-behaved version of httpbin 2023-02-18

    tags: network/http

    [ permalink ]

    • https://github.com/april/httpbin/tree/misbehaving
    • https://macaw.social/@april/109514342546493216