Why a WebSocket client masks its frames
Every frame from a browser is masked with a random key. This simple XOR stops web pages from poisoning proxy caches.
9 minute read
Blog
I write about software architecture, .NET, real-time systems and encryption.
-
-
How a WebSocket frame is built and sent
Every WebSocket message travels in frames. Follow one frame byte by byte, with C# code you can test.
10 minute read
-
AES-GCM and why a nonce must never repeat
AES-GCM needs a new nonce for each message. One repeat can expose the plain text and let an attacker forge messages.
10 minute read
-
A first look at ML-KEM, the post-quantum key exchange
ML-KEM became a NIST standard in 2024. This post explains what it does and how it differs from the key exchange we use today.
10 minute read
-
Where to draw a module boundary
Every boundary between modules has a cost. A few simple questions help you decide where one belongs.
9 minute read
-
Fewer allocations with Span<T> in .NET
Span<T> lets you work on a slice of memory without a copy. A small parser shows the change, before and after.
9 minute read
-
Key exchange in plain words, with X25519
Two sides can agree on a shared secret over an open network. X25519 does this in a few clear steps.
10 minute read