Notes tagged “http”

2026

1. July 2026 The Header That Can't Be Cached

   Cache-Control from first principles — and why a page carrying a CSP nonce must be told never to be stored, not merely "don't cache."

   security csp http caching web dissecting-systems

2. June 2026 The URL Is the Hash

   Content-addressing on the wire — how the web quietly became a content-addressed store, where fingerprinted URLs and Subresource Integrity are real Merkle edges and the cache that looks most like one isn't.

   http caching content-addressing subresource-integrity merkle cdn web-performance security dissecting-systems