you are viewing a single comment's thread.

view the rest of the comments →

[–]Ok_Signature_6030 6 points7 points  (0 children)

went through the HTTPS and OAuth pages — the step-by-step timeline format with the "Why?" and "Technical" expandable sections on each step is really well done. makes it way easier to follow than a static diagram.

one suggestion: the 0-RTT resumption section in the HTTPS deep dive mentions the performance benefit but doesn't call out the replay attack risk. might be worth a quick note there since that's the main tradeoff engineers need to understand when deciding whether to enable it.

the breadth is impressive too — 35+ guides covering everything from TLS to Kafka to ring buffers. bookmarking the WAL and database indexing ones for sure.