Load 28

Writing on code & systems.

Alla11yagileaiarchitectureauthenticationawsbmadbrowsercacheclaudecompilercomponentcontextcookiecsrfcssdata-modelingdata-structuredatabasedesign-systemdeveloper-toolsdevelopmentdnsdxeffecteffect-tsenterpriseentireeslintfiberfido2functionfunctional programmingfunctional-programminggenericgitgraphqlgrpci18njavascriptloadingmathnext.jsnitrooauthoptimizationpasskeyperformancepnpmprotobufqueryqwikreactreconciliationredisrefactoringreflectionremixrenderingrscrustschemasecurityserverside-projectspec-drivenssrstreamingtanstacktanstack-querytestingtokiotype-systemtypescriptunicodeunjsuxvalidationvanilla-extractwebauthnwebsocketxssyarnzod
security4 postsโœ•
2026
Latest
2026.03.05ยท14 min read

Passkey & WebAuthn Deep Dive

Google์— ๋กœ๊ทธ์ธํ•  ๋•Œ ๋น„๋ฐ€๋ฒˆํ˜ธ ๋Œ€์‹  ์ง€๋ฌธ์„ ์ฐ๋Š” ๊ฒฝํ—˜์„ ํ•ด๋ณธ ์ ์ด ์žˆ์„ ๊ฒ๋‹ˆ๋‹ค. ๋น„๋ฐ€๋ฒˆํ˜ธ๋ฅผ ์ž…๋ ฅํ•˜์ง€๋„ ์•Š์•˜๋Š”๋ฐ ๋กœ๊ทธ์ธ์ด ๋ฉ๋‹ˆ๋‹ค. ์ด๊ฒŒ passkey์ž…๋‹ˆ๋‹ค.

02.17

OAuth Deep Dive

OAuth 2.0 ์ด์ „์—๋Š” ์ œ3์ž ์•ฑ์ด ์‚ฌ์šฉ์ž์˜ ๋ฆฌ์†Œ์Šค์— ์ ‘๊ทผํ•˜๊ธฐ ์œ„ํ•œ ํ‘œ์ค€ ์œ„์ž„ ํ”„๋กœํ† ์ฝœ์ด ์—†์—ˆ์Šต๋‹ˆ๋‹ค. 2006~2007๋…„๊ฒฝ Twitter API๋ฅผ ์—ฐ๋™ํ•˜๋Š” ์„œ๋“œํŒŒํ‹ฐ ํด๋ผ์ด์–ธํŠธ๋“ค์€ ์‚ฌ์šฉ์ž์˜ Twitter ์•„์ด๋””์™€ ๋น„๋ฐ€๋ฒˆํ˜ธ๋ฅผ ์ง์ ‘ ์ž…๋ ฅ๋ฐ›์•„ ์ €์žฅํ•˜๋Š”โ€ฆ

oauthsecurityauthentication10 min
โ†’
02.17

๋ธŒ๋ผ์šฐ์ €๊ฐ€ ๊ฐ™์€ ์‚ฌ์ดํŠธ๋ฅผ ํŒ๋‹จํ•˜๋Š” ๊ธฐ์ค€

๋ธŒ๋ผ์šฐ์ €์˜ SameSite ์ฟ ํ‚ค ์ •์ฑ…์€ eTLD+1์„ ๊ธฐ์ค€์œผ๋กœ same-site ์—ฌ๋ถ€๋ฅผ ํŒ๋‹จํ•ฉ๋‹ˆ๋‹ค. TLD, eTLD, eTLD+1 ๊ฐ๊ฐ์˜ ์ •์˜์™€ ๊ด€๊ณ„๋ฅผ ์ •๋ฆฌํ•ฉ๋‹ˆ๋‹ค.

securitycookiebrowserdns5 min
โ†’
02.16

Cookie Deep Dive

์ฟ ํ‚ค์™€ JavaScript ๋ฉ”๋ชจ๋ฆฌ๋Š” ํ† ํฐ ์ €์žฅ์†Œ๋กœ์„œ ๋ณด์•ˆ ํŠน์„ฑ์ด ๋‹ค๋ฆ…๋‹ˆ๋‹ค. ์ฟ ํ‚ค๋Š” ์ž๋™ ์ „์†ก๋˜์–ด CSRF์— ๋…ธ์ถœ๋˜๊ณ , ๋ฉ”๋ชจ๋ฆฌ๋Š” JavaScript๋กœ ์ ‘๊ทผ ๊ฐ€๋Šฅํ•ด XSS์— ๋…ธ์ถœ๋ฉ๋‹ˆ๋‹ค. ๊ฐ ์œ„ํ˜‘์˜ ๊ตฌ์กฐ์™€ ๋ฐฉ์–ด ์ˆ˜๋‹จ์„ ์ •๋ฆฌํ•ฉ๋‹ˆ๋‹ค.

securitycookiecsrfxssoauthenterprise10 min
โ†’
๋ชจ๋“  ๊ธ€์„ ์ฝ์œผ์…จ์Šต๋‹ˆ๋‹ค โœฆ