Caloogy Article

Web Security

Frontend Tampering: A Retrospective on the Bybit $1.5 Billion Incident

Web Security · Oct 28, 2026 · 4 min

The Four Locks of Cookies: `__Host-`, Secure, HttpOnly, and SameSite

Web Security · Aug 13, 2026 · 3 min

Signature Login and Replay Protection: nonce, Domain, and Expiration Time

Web Security · Jul 23, 2026 · 4 min

Same-Origin Policy: Why Wallets Use a Separate Subdomain

Web Security · May 21, 2026 · 4 min

CSP and SRI: Run Only Your Own Code

Web Security · May 18, 2026 · 4 min

Email Authentication: SPF, DKIM, and DMARC

Web Security · Mar 9, 2026 · 4 min

Passkey: Why It Is Inherently Phishing-Resistant

Web Security · Dec 17, 2025 · 4 min