Explainers: Software
Cursor vs Offset Pagination: What Changes Under Inserts
Compare cursor and offset pagination when records move, repeat or change during a long API traversal.
DPoP vs Bearer Tokens: What Proof of Possession Changes
How DPoP binds OAuth tokens to a client key, what replay checks add and which risks still remain.
ETag vs Last-Modified: Choosing an HTTP Validator
Choose the right HTTP validator for caching, conditional requests and safe concurrent updates.
Semantic Versioning vs Calendar Versioning
SemVer signals API compatibility; CalVer signals release timing. Choose the contract your users need.
TLS 1.3 0-RTT: Why Early API Requests Can Replay
Early TLS requests save waiting, but encryption alone cannot prevent a repeated API action.