Trying out Lit for some toy projects since I like how it builds on standard Web technologies. Using tagged template literals for building HTML is neat, but also feels like it could have some sharp edges (i.e., the usual problems that come from template strings). How does one navigate this?

New (as of yesterday) post in which I go through the journey of actually writing a functioning WebAuthn Relying Party. Link: treats.now/my-day-with-...

I decided to try and see how long it would take to make a passkey relying party implementation using Go and plain JavaScript. It turns out the answer is one (1) day. JavaScript browser APIs in 2025 are a lot nicer than I thought they would be! Repo link: github.com/jnschaeffer/...

Gotta love when the phishing resistant authentication standards body tells you to just dump your JWTs into jwt.io.

New post is up on x5c and JWT. Personally I like the idea of token signing keys backed by certificates instead of discovered keys, but that's just me. treats.now/x5c-is-not-s...

I'm a little surprised by the JWT crates available in the Rust ecosystem. josekit seems pretty tightly coupled to OpenSSL (not necessarily a bad thing), and biscuit looks like it hasn't been updated in a couple years. The jwt crate was also last updated in 2021. Am I missing something here?

New post is up on identity. Part reflection on the subject in general, part speculation on the future. treats.now/meditations-...

Reading up on LAKE today and the level of system constraints the RFCs target goes so far beyond anything I've ever had to consider. X.509 with an unreliable channel and hundreds of bits per second is really something.

"If you write your congressional representative these days, your reply may come from a computer..." (Source.)

In the wake of an apparent resurgence in the popularity of the Dead Internet Theory and ideas like it, I have been wondering what the Web is and what it would mean for it to die. If you have been wondering the same, or even if you haven't, feel free to read this post: treats.now/assessing-th...

Hello Bluesky. I am here to talk about computers.