14 pieces · Browser Extensions, Privacy Tools, and Open Web Resources
WebAuthn is implemented everywhere that matters. The blockers that remain are credential portability, account recovery, and relying-party implementation — not the browser.
By Kai Nakamura · 6 min · 8 August 2026
Ladybird is targeting its first alpha in 2026 — Linux and macOS, developers only. Here's what a genuinely new engine has built, what the test numbers mean, and what an alpha does not promise.
By Kai Nakamura · 6 min · 8 August 2026
A practical look at the WebExtensions API across Chrome, Firefox, Edge, and Safari in 2026 — where they agree, where they diverge, what polyfills actually do, and how to test across browsers without losing your mind.
By Kai Nakamura · 9 min · 13 May 2026
A practical look at speculation rules api prerendering — what it does, how it works, and where the real-world tradeoffs live for developers and privacy-conscious users.
By Kai Nakamura · 6 min · 22 April 2026
A practical look at css containment isolation guide — what it does, how it works, and where the real-world tradeoffs live for developers and privacy-conscious users.
By Kai Nakamura · 6 min · 18 February 2026
A practical look at web accessibility aria guide — what it does, how it works, and where the real-world tradeoffs live for developers and privacy-conscious users.
By Kai Nakamura · 6 min · 3 December 2025
A practical look at fetch api vs xmlhttprequest — what it does, how it works, and where the real-world tradeoffs live for developers and privacy-conscious users.
By Kai Nakamura · 6 min · 17 September 2025
A practical look at push api web notifications — what it does, how it works, and where the real-world tradeoffs live for developers and privacy-conscious users.
By Kai Nakamura · 6 min · 9 July 2025
A practical look at http headers security guide — what it does, how it works, and where the real-world tradeoffs live for developers and privacy-conscious users.
By Kai Nakamura · 6 min · 23 April 2025
A practical look at webassembly practical guide — what it does, how it works, and where the real-world tradeoffs live for developers and privacy-conscious users.
By Kai Nakamura · 6 min · 5 February 2025
A practical look at web workers multithreading javascript — what it does, how it works, and where the real-world tradeoffs live for developers and privacy-conscious users.
By Kai Nakamura · 6 min · 20 November 2024
A practical look at web components custom elements guide — what it does, how it works, and where the real-world tradeoffs live for developers and privacy-conscious users.
By Kai Nakamura · 6 min · 4 September 2024
A practical comparison of localStorage, sessionStorage, and IndexedDB — when to use each, where the tradeoffs are, and the pitfalls that catch developers off guard.
By Kai Nakamura · 4 min · 19 June 2024
Trusted Types gives browsers a way to enforce, at the platform level, that dangerous DOM sink APIs only ever receive sanitized values. Here's how the API works and why it's a genuine architectural fix, not another sanitizer library.
By Kai Nakamura · 8 min · 8 February 2022