- TCPDF: 25 Years of Generating PDFs in PHP
- Stop Rewriting Go Service Boilerplate: Ship Production Go APIs Faster with nurago
- Software Quality Is a System, Not an Act: Inside the Quality Pipeline of nurago
- Redacting Secrets from Go Logs on a Performance Budget
- Packing an Entire Country Record into a Single uint64
- The Life of a Password: Argon2id in Production with nurago
- The Classic JWT Attacks, Addressed by Construction in Go
- Checking Passwords Against Have I Been Pwned Without Leaking Them
- From singleflight to a Production Cache: a Gap Analysis
- Deriving a Fast Fixed-Width Hex Encoder in Go
- Exponential Backoff with Jitter in Go, Without the Overflow Footgun
- Random IDs in Go, Trap by Trap: UUIDv7 and Unbiased Random Strings
- Filtering Untrusted Client Queries in Go: Threat Model First
- A Longest-Prefix Trie for Numeric Keys, in Six Design Questions
- A Distributed Lock in Go and MySQL, and Every Way the Session Can Betray You
- A DNS-Caching Dialer for http.Transport in Go
- A Production slog.Handler on Top of zerolog
- Observing Outbound HTTP in Go Without Disturbing It
- Between Two Attempts: What an HTTP Retry Loop Must Decide
- A Reverse Proxy Is Defined by What It Refuses to Do
- Before the First Request and After the Last: a Go HTTP Server's Edges
Articles
Articles and Blog posts