SYSTEM LOGS
Technical analysis, security research, and network utility documentation.
Access Level: Public
Web Bot Auth: How the Web Started Checking an Agent's ID
For thirty years a bot was whoever it claimed to be. Web Bot Auth replaces that promise with an Ed25519 signature. How the protocol works and what it proves.
Encrypted Client Hello: The Last Plaintext Crack in TLS 1.3 Privacy
ECH finally closes the SNI leak in TLS 1.3. A practical guide to RFC 9849, how Encrypted Client Hello works, and how to actually enable it in Firefox, Chrome, and beyond.
Zero Trust vs VPN for Small Teams: Cloudflare Tunnel or Tailscale?
Zero trust vs VPN for indie projects and small teams: how Cloudflare Tunnel with Access and Tailscale work, what each protects, and when to pick which.
The Captcha Trap: Why You Are Treated Like a Bot
Getting CAPTCHAs on every site? How reCAPTCHA, Cloudflare and hCaptcha decide you look like a bot, which signals trip them, and how to make them stop.
One scan shows what your connection and browser give away.
Privacy & Trust Index →