Skip to content
All tags

#web

2 posts
techguideBug Bounty from Zero

What Do the Browser and Server Exchange When You Click a Link?

A browser sends a request with a method, target, headers, and sometimes cookies. The server returns a status, headers, and content. Authentication identifies a user; authorization must still check access to each order.

#bug-bounty#security#web#http#cookies#session#curl
techdeep-diveOMP Internals Deep Dive

OMP Internal Design #13: collab-web & wire protocol — How Multi-User Sessions Serialize, Guest Permission Boundaries, and Composer Interrupt Broadcast

omp collab uses a hub topology (host authoritative, guests never peer) with AES-256-GCM sealed JSON frames, 4-byte envelope, and snapshot-chunk sharding. Guest permissions are bound to a 16-byte write token in the link, verified by the host via timing-safe comparison.

#omp#collab#wire-protocol#real-time#encryption#web