12 posts tagged "security".
Mode 2 in its pure form: a drone sells 30 minutes of camera time, a satellite sells a tasking window. The buyer verifies the purchase with the public root, the operator keeps no ledger, the receipt cannot be forged or extended.
Seed-UX as an engineering problem: show-once display, order-verification, checksum import, passphrase warnings — each component in the package answers for a specific catastrophe. Plus sessions with auto-renewal and encrypted context cache.
An honest breakdown of seven design decisions: determinism over storage, stateless sessions, two verification modes, attestations over roles, name canonicality, fresh salt for cache, and zero-fallback ban — with alternatives and what we'd do differently.
The seed phrase is the sole carrier of your identity. We don't store it. Why this is a deliberate decision, the price you pay for it, and why that price is more honest than the alternative.
JWT, OAuth and Me2eM solve the same task — authorization. But trust models are fundamentally different: who signs, who does the server trust, and what happens on compromise. A full comparison with code examples.
How to revoke signed tokens when there are no server sessions: granularity of revocation, fail-open vs fail-closed, record TTLs and why stateless ≠ irrevocable.
From storage to computation: how a seed phrase replaces a password database. Service isolation at the key-tree level, contexts without a registry, rotation through naming — and the honest price of forgoing a vault.
How a signed token replaces a server session: what's inside, what the verifier checks, how stateless differs from JWT — and why jti rotation makes revocation pinpoint.
A zero-trust-to-server messenger concept: identity without registration, stateless session verification, X3DH chats, epoch rotation of group keys, and the honest price of privacy.
How a parent signature turns a key into a credential: grants, two verification modes and instant revocation of an entire branch in one operation.
How to build a free security pipeline for a TypeScript monorepo on pnpm: secret scanning, dependency audit, CodeQL SAST — and four problems we solved on the way to it.
A complete engineering guide to an architecture where the private key is never stored: a deterministic key tree, non-extractable CryptoKey, canonical X3DH.
Install a package, follow the quick start, and verify your first stateless session in minutes.