Mike West

New post on my blog about switching password managers in 2026! It covers: - why your iPhone or iPad, and not your Mac, might be the place to start your switch - the recent controversy in password management and some thoughts on values - and more! rmondello.com/2026/09/07/s...

This looks like it could be really promising! Connection Allowlist: a network firewall, built into the browser scotthelme.co.uk/connection-a...

Modern solutions against cross-site attacks (frederikbraun.de/modern-solut...): An article about cross-site leak attacks and browser-based defenses. You will also learn why web security best practices is always opt-in and finally how YOU can get increased security controls.

Do you, like me, periodically need to produce a base64-encoded SHA-2 hash of some text? Have you found existing online generator tools to be slightly annoying in some minor way that doesn't precisely fit your workflow? Well, here's another that will annoy you in _different_ ways: sha2.it

Happy to publish the effort of my last five years: Security Signals. research.google/pubs/securit...

Daniel Stenberg's notes from this week's HTTP Workshop are a nice way of catching up on smart folks' thoughts about the present and future of your favorite transport protocol: Day 1: daniel.haxx.se/blog/2024/11... Day 2: daniel.haxx.se/blog/2024/11... Day 3: daniel.haxx.se/blog/2024/11...

I set up this account, then nerdsniped myself right past the process of crafting a witty and enticing "Hello, world!" post to instead spend a few minutes trying to figure out whether Bluesky supported security keys rather than email for 2FA. It apparently doesn't. 🤷