The header tells browsers to refuse plain HTTP to this host for the given duration, and they honour it from cache — so shortening the max-age only affects…
Minified stack traces are unreadable, and the usual fix — shipping source maps — publishes the original source to anyone who opens devtools. Both problems have the same…
certbot renew checks every certificate it manages and does nothing for those with more than thirty days left. Running it often is therefore free, and running it rarely…
Deploying by rsync on a Friday afternoon, and what replaced it: lint, test, build, stage, promote — with a rollback that is the same mechanism rather than a…
Omitting permission_callback registers a route that anyone can call. It works, there is no error, and this year there is not even a warning — the notice that…
The limits are generous for a production site and easy to exhaust from a staging environment, because they count against the registered domain rather than the hostname —…