Archive

1. Why in Building Protocols, Like Code, Starting Over Is Dumb 21 Jul 2026 IETF Standards Protocol Design

   Old lessons seem like they don't hold in the age of AI. But they are just as relevant as always.

2. If you solve this CAPTCHA, you are not welcome here 24 Jun 2026 Web Abuse

   CAPTCHAs are an understandable response to a bad situation, but they are no longer a *rational* response.

3. Versioning JSON for APIs 04 Feb 2026 Evolution Design

   Please stop with the version numbers in JSON protocols and formats.

4. The Hacklore Letter and Privacy 11 Dec 2025 Security Privacy

   Common advice on security practices are way out of date, but some of those practices protect privacy too.

5. Status Update: AI Preferences 30 Oct 2025 AI

   My personal take on the status of the effort to standardize a way to express preferences about how AI uses content.

6. Expanding what HTTPS means 24 Dec 2024 Protocol Design Security IETF

   What can we do for all those servers out there that want to use HTTPS, but find that they can't.

7. C2PA Is Not Going To Fix Our Misinformation Problem 12 Dec 2024 W3C Provenance Authenticity Misinformation

   A critical look at C2PA, which is probably not our best hope for dealing with misinformation.

8. Everything you need to know about selective disclosure 21 Nov 2024 IETF W3C Identity Cryptography

   … and why it might not offer the answers to difficult identity questions as you might have hoped

9. Thoughts on TAG Design Reviews 21 Nov 2023 W3C TAG

   I am running for the W3C TAG election

10. Fraud, Abuse, Fingerprinting, Privacy, and Openness 23 Aug 2023 W3C Anti-Fraud Advertising Abuse Fingerprinting

    Why my bank is fingerprinting me and why that's fine.

11. Entropy and Privacy Analysis 27 May 2022 Information Theory Privacy W3C

    A discussion about the use of entropy and similar statistics in privacy analysis.

12. Bundling for the Web 26 Feb 2021 IETF W3C

    How hard could this possibly be?

13. Standardizing Principles 05 Jan 2021 IETF W3C

    The role of specifications in standards extends beyond a description of what happens when.

14. RFCs in HTML 18 Dec 2020 IETF HTML Visual Design

    The IETF has long made its specifications available on the web, but its official offerings for HTML are inferior to text.

15. Next Level Version Negotiation 11 Dec 2020 Protocol Design

    New insights regarding version negotiation mechanisms in protocols suggest that we have been doing it right, but only by accident.

16. Oblivious DoH 09 Dec 2020 DNS HTTP

    Thoughts on the recent announcement of Oblivious DoH support.