Fast load times

https://web.dev/fast

(Read More..)

HTTP/3

https://daniel.haxx.se/blog/2018/11/11/http-3/

(Read More..)

websocket security

http://www.theseus.fi/bitstream/handle/10024/113390/Harri+Kuosmanen+-+Masters+thesis+-+Security+Testing+of+WebSockets+-+Final.pdf;jsessionid=6199D8ADAA4F3A2270912A3002D5E1FE?sequence=1

(Read More..)

KONG !!!!

Secure, Manage & Extend your APIs and Microservices

 The open-source management layer for APIs, delivering high performance and reliability.

 

https://getkong.org/

 

(Read More..)

lwan

Lwan is a high-performance & scalable web server.

Requests per second vs. number of concurrent connections^?

	Hello, World! (C)		100B file
	Hello, World! (LuaJIT)		32KiB file

In development for over 3 years, Lwan was until recently a personal research effort that focused mostly on building a solid infrastructure for a lightweight and speedy web server.
With its low disk and memory footprints, it's suitable to be used from embedded devices to robust servers. Both static and dynamic content can be served, as it can also be used as a library. Dynamic content can be generated by code written in either C or Lua.

(Read More..)

Bypassing web application firewalls using HTTP headers

http://h30499.www3.hp.com/t5/Fortify-Application-Security/Bypassing-web-application-firewalls-using-HTTP-headers/ba-p/6418366#.U4dluNKSz3R

(Read More..)

Speeding up mobile pages with mod_pagespeed and ngx_pagespeed

http://googledevelopers.blogspot.com/2013/11/speeding-up-mobile-pages-with.html

(Read More..)

MONKEY HTTP SERVER {GEEK}

http://monkey-project.com/

http://edsiper.linuxchile.cl/blog/2013/02/27/architecture-of-a-linux-based-web-server/

(Read More..)

Improving testing by using real traffic from production

http://leonsbox.com/blog/2013/06/04/improving-testing-by-using-real-traffic-from-production/

(Read More..)

CSP to the Rescue: Leveraging the Browser for Security

https://blog.twitter.com/2013/csp-rescue-leveraging-browser-security

(Read More..)

Pragmatic REST & BDD at IPC

qafoo.com/blog/047_pragmatic_rest_bdd_ipc.html

(Read More..)

An HTTP & SPDY client for Android and Java applications

HTTP is the way modern applications network. It’s how we exchange data & media. Doing HTTP efficiently makes your stuff load faster and saves bandwidth.
OkHttp is an HTTP client that’s efficient by default:

• SPDY support allows all requests to the same host to share a socket.
• Connection pooling reduces request latency (if SPDY isn’t available).
• Transparent GZIP shrinks download sizes.
• Response caching avoids the network completely for repeat requests.

OkHttp perseveres when the network is troublesome: it will silently recover from common connection problems. If your service has multiple IP addresses OkHttp will attempt alternate addresses if the first connect fails. This is necessary for IPv4+IPv6 and for services hosted in redundant data centers. OkHttp also recovers from problematic proxy servers and failed SSL handshakes.
You can try OkHttp without rewriting your network code. The core module implements the familiar java.net.HttpURLConnection API. And the optional okhttp-apache module implements the Apache HttpClient API.
OkHttp supports Android 2.2 and above. For Java, the minimum requirement is 1.5.



http://square.github.io/okhttp/

(Read More..)

Practical HTTP Host header attacks

http://www.skeletonscribe.net/2013/05/practical-http-host-header-attacks.html

(Read More..)

HTTP/2.0 WTF?

http://www.mnot.net/talks/http2-wtf/#/

(Read More..)

know-your-http

https://github.com/jesusabdullah/know-your-http

(Read More..)

How To Reduce Image Size With WebP Automagically

http://blog.netdna.com/developer/how-to-reduce-image-size-with-webp-automagically/

(Read More..)

What every web developer must know about URL encoding

http://blog.lunatech.com/2009/02/03/what-every-web-developer-must-know-about-url-encoding

(Read More..)

Rails SecureHeaders

The gem will automatically apply several headers that are related to security. This includes:

• Content Security Policy (CSP) - Helps detect/prevent XSS, mixed-content, and other classes of attack. CSP 1.1 Specification
• HTTP Strict Transport Security (HSTS) - Ensures the browser never visits the http version of a website. Protects from SSLStrip/Firesheep attacks. HSTS Specification
• X-Frame-Options (XFO) - Prevents your content from being framed and potentially clickjacked. X-Frame-Options draft
• X-XSS-Protection - Cross site scripting heuristic filter for IE/Chrome
• X-Content-Type-Options - Prevent content type sniffing 

https://github.com/twitter/secureheaders

(Read More..)

ngx_pagespeed

http://ngxpagespeed.com/ngx_pagespeed_example/

(Read More..)

File Upload Support on Mobile

http://viljamis.com/blog/2012/file-upload-support-on-mobile/

(Read More..)