standards – Noise

A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed

Sebastiaan Neuteboom — Tue, 14 Jul 2026 13:00:00 +0000

When a failed DNSSEC key rollover took down the .AL TLD, we deployed a Negative Trust Anchor to restore resolution. This time, though, clients didn't have to take our word for it: 1.1.1.1 returned EDE 33, a new DNS error code that signals directly in the response that DNSSEC validation was bypassed.

Moving past bots vs. humans

Thibault Meunier — Tue, 21 Apr 2026 13:00:00 +0000

As AI assistants and privacy proxies challenge the capabilities of traditional bot detection, the Web needs new models for accountability. We believe that control should remain with the client, and that an open ecosystem of anonymous credentials is key to preserving user privacy while protecting origins from abuse.

We deserve a better streams API for JavaScript

James M Snell — Fri, 27 Feb 2026 06:00:00 +0000

The Web streams API has become ubiquitous in JavaScript runtimes but was designed for a different era. Here's what a modern streaming API could (should?) look like.

What came first: the CNAME or the A record?

Sebastiaan Neuteboom — Wed, 14 Jan 2026 00:00:00 +0000

A recent change to 1.1.1.1 accidentally altered the order of CNAME records in DNS responses, breaking resolution for some clients. This post explores the technical root cause, examines the source code of affected resolvers, and dives into the inherent ambiguities of the DNS RFCs.

MoQ: Refactoring the Internet’s real-time media stack

Mike English — Fri, 22 Aug 2025 14:00:00 +0000

Media over QUIC (MoQ) is a new IETF standard that resolves this conflict, creating a single foundation for sub-second, interactive streaming at a global scale.

New URLPattern API brings improved pattern matching to Node.js and Cloudflare Workers

Yagiz Nizipli — Mon, 24 Mar 2025 13:00:00 +0000

Today we're announcing our latest contribution to Node.js, now available in v23.8.0: URLPattern.

Enhance your website’s security with Cloudflare’s free security.txt generator

Alexandra Moraru — Sun, 06 Oct 2024 23:00:00 +0000

Introducing Cloudflare’s free security.txt generator, empowering all users to easily create and manage their security.txt files. This feature enhances vulnerability disclosure processes, aligns with industry standards, and is integrated into the dashboard for seamless access. Strengthen your website's security today!

You can now use WebGPU in Cloudflare Workers

André Cruz — Wed, 27 Sep 2023 13:00:56 +0000

Today, we are introducing WebGPU support to Cloudflare Workers. This blog will explain why it's important, why we did it, how you can use it, and what comes next

Privacy Gateway: a privacy preserving proxy built on Internet standards

Mari Galicer — Thu, 27 Oct 2022 13:01:00 +0000

Privacy Gateway enables privacy-forward applications to use Cloudflare as a trusted Relay, limiting which identifying information, including IP addresses, is visible to their infrastructure

HPKE: Standardizing public-key encryption (finally!)

Christopher Wood — Thu, 24 Feb 2022 23:12:36 +0000

HPKE (RFC 9180) was made to be simple, reusable, and future-proof by building upon knowledge from prior PKE schemes and software implementations. This article provides an overview of this new standard, going back to discuss its motivation, design goals, and development process

Cloudflare and the IETF

Jonathan Hoyland — Wed, 13 Oct 2021 12:59:37 +0000

Cloudflare helps build a better Internet through collaboration on open and interoperable standards. This post will describe how Cloudflare contributes to the standardization process to enable incremental innovation and drive long-term architectural change.

The Syslog Hell

Bozho — Sun, 09 May 2021 21:39:12 +0000

Syslog. You’ve probably heard about that, especially if you are into monitoring or security. Syslog is perceived to be the common, unified way that systems can send logs to otherContinue reading

The post The Syslog Hell appeared first on Bozho's tech blog.

Innovating on Authentication Standards

mikesefanov — Mon, 25 Jun 2018 13:59:44 +0000

yahoodevelopers: By George Fletcher and Lovlesh Chhabra When Yahoo and AOL came together a year ago as a part of the new Verizon subsidiary Oath, we took on the challenge of unifying their identity platforms based on current identity standards. Ident...