Web Design & Development
API Pagination: What Actually Works
Returning large collections in pages, using offsets, cursors or keyset pagination. Why does it matter? Unpaginated endpoints eventually time out, and the pagina...
Tagged #Guides
2013 articles with this tag
Web Design & Development
Idempotent API Requests, Done Properly
Designing requests so that repeating them has the same effect as sending them once, usually with an idempotency key. At a glance Idempotency keys let servers re...
Web Design & Development
How to Get Single Sign-On for Business Apps Right
Letting people sign in to an application with their existing work identity, usually through SAML or OpenID Connect. What is at stake Business customers expect s...
Web Design & Development
User Provisioning with SCIM: What Actually Works
A standard for automatically creating, updating and disabling user accounts from a customer's identity system. The key figures Standard SCIM defines a protocol...
Web Design & Development
Audit Logging: What Actually Works
Recording who did what and when in an application, separately from technical error logs. Where most projects go wrong The usual mistakes: Audit data mixed into...
Web Design & Development
Data Retention in Applications: The Decisions That Matter
Deciding how long different types of data are kept and building deletion into the system. Why does it matter? Keeping everything forever increases breach impact...
Web Design & Development
Data Portability Exports, Done Properly
Letting users download their own data in a usable format. At a glance Formats machine-readable formats such as JSON or CSV are expected Scope exports should cov...
Web Design & Development
A Practical Guide to Encrypting Sensitive Data
Protecting data at rest and in transit with encryption, and managing the keys that make it work. What is at stake Encryption limits breach impact, but poor key...
Web Design & Development
HSTS and TLS Configuration: The Decisions That Matter
Configuring HTTPS properly, including protocol versions, cipher choices and strict transport security. The key figures HSTS tells browsers to use HTTPS for a do...
Web Design & Development
DDoS Mitigation Basics, Done Properly
Protecting a site against attacks that overwhelm it with traffic. Where most projects go wrong The usual mistakes: Exposed origin servers No rate limits on sear...
Web Design & Development
Web Application Firewalls, Done Properly
A filtering layer that inspects HTTP traffic and blocks requests matching known attack patterns. Why does it matter? A firewall buys time against known attacks,...
Web Design & Development
A Practical Guide to Security Disclosure Policies
A published policy telling security researchers how to report vulnerabilities in your systems. At a glance security.txt a standard file that publishes contact d...
Load more articles
Showing 1,788 of 2,013