[ 01 ] — The blog

Notes on the
open internet.

Short essays on how the internet works under the hood — networking concepts explained simply, the meaning behind IP and DNS data, and practical ways to use these tools.

// latest

CORS Explained: Why the Browser Blocks Your Request

The console names CORS as the thing that stopped you, when CORS is the mechanism that would have let you through. What makes a request plain enough to skip the preflight, why posting JSON never is, which wildcards credentials take away, and why none of it constrains a script running outside a browser.

Read →

HTTP Status Codes Explained: What Each Number Means

The first digit carries almost all of the meaning, and the specific numbers settle arguments you would otherwise guess at. Why four different redirect codes exist, what separates 401 from 403 and 404 from 410, and which machine a 502 blames that a 504 does not.

Read →

DDoS Attacks Explained: What Runs Out First

Bandwidth, connection state, and application work each give way in a different manner, and which one goes first decides who can fix it. Why a half-open TCP connection costs the server real memory, how a 15-byte request turns into 750 kB aimed at somebody else, and what a log full of source addresses is actually worth.

Read →

DoH vs DoT: Two Ways to Encrypt Your DNS Queries

One runs on a port of its own, the other hides inside ordinary web traffic, and underneath they encrypt exactly the same thing. The ports and RFCs behind each, what your network can still see either way, and which one fits where.

Read →

MX Records Explained: How Mail Finds Your Domain

Two fields decide where every message to your domain goes. Why the lowest preference number wins, what happens when a domain publishes no MX at all, why an MX must never point at a CNAME, and how to declare that you accept no mail.

Read →

NAT Explained: How One Public IP Serves a Whole Network

Every device in your house has its own address, and the internet only ever sees one of them. What your router rewrites in each packet, why mappings expire on two very different clocks, how anything gets in from outside, and what carrier-grade NAT takes away.

Read →

Common Ports Cheat Sheet: What Runs on Each Number

Nearly sixty port numbers in one table, with the transport each service actually runs on and the name IANA has registered for it, plus why the registry says nCube License Manager where you expect Oracle, and which numbers deserve a second look on a public host.

Read →

TCP vs UDP: What's the Difference and When Each Is Used

Two protocols carry almost everything on the internet: one checks that every packet arrives, the other never looks back. How TCP guarantees delivery, why UDP trades that safety for speed, their headers side by side, and how to tell which one a service is using.

Read →
// archive — by topic

Network

BGP and Internet Routing: How Networks Find Each Other

AWS, Google Cloud, and Azure IP Ranges: Where They Live and How to Use Them

Cloudflare IP Ranges: What They Are and How to Use Them

Subnet Mask Cheat Sheet: /0 to /32

How to Change Your IP Address (Public and Private)

How to Find Your IP Address on Any Device

Website Response Time Explained: Latency, TTFB, and Jitter

What Is IP Reputation? How It's Scored and How to Check Yours

IOCs Explained: What an Indicator of Compromise Actually Tells You

Bulk IP Lookups: When You Need to Investigate More Than One Address

MAC Addresses Explained: How Devices Identify Themselves on a Network

What is a CDN and why do most websites use one?

What is CIDR notation? The slash-numbers explained

Port 80 vs port 443: HTTP, HTTPS, and what the numbers mean

What is reverse DNS and when does it matter?

How to read a traceroute output

ASN explained: what an Autonomous System Number actually is

Public vs private IP addresses: what's the difference?

What are RFC 1918 private IP ranges?

What is my IPv6 address?

How Does IP Geolocation Actually Work?

What Is My IP Address? A Complete Guide

DNS

How to Find All Subdomains of a Domain (Without Scanning)

Domain Health Checks Explained: What One Report Tells You

Typosquatting Explained: How One Mistyped Letter Becomes an Attack

DNSSEC Explained: How DNS Gets Its Chain of Trust

CAA Records: Controlling Who Can Issue Your SSL Certificates

Certificate Transparency: How CT Logs Prevent Rogue Certificates

DNS propagation: why your changes take time

What is WHOIS? How to look up who owns a domain or IP

What is a DNS record? A, AAAA, MX, TXT, and the rest, explained

How to find a website's IP address

Email

SPF, DKIM, and DMARC Explained: How They Work Together

How to Create a DMARC Record (Step by Step)

How to Create an SPF Record (Step by Step)

MTA-STS and TLS-RPT Explained: Locking Down Email in Transit

BIMI Explained: How a Brand Logo Earns Its Place in the Inbox

How to Validate an Email Address Without Sending a Message

DKIM Explained: The Signature Behind Every Trusted Email

How to Read Email Headers: Tracing a Message From Send to Inbox

DMARC Explained: The Policy That Ties Email Authentication Together

SPF Records Explained: How Email Authentication Starts

How to check if an IP is on a blacklist

Privacy

How to Hide Your IP Address (VPN, Tor, and Proxies Compared)

User Agent Strings Explained: What Your Browser Tells Every Website

DNS Leak Testing: What Your VPN Might Not Protect

How VPN Detection Works: What Websites Can See

WebRTC leak explained: what your browser reveals without asking

What is browser fingerprinting and can websites really identify you?

Web Security

TLS 1.2 vs TLS 1.3: What Actually Changed

SSL Certificate Chains Explained: Leaf, Intermediate, and Root

How SSL Certificates Work: The Chain of Trust Behind Every Padlock

What Open Ports Reveal About Any IP (and How to Check Exposure for Free)

Content Security Policy Explained: Stopping XSS Before It Starts

HSTS Preload Explained: How Browsers Force HTTPS From the Very First Visit

HTTP Security Headers Explained: What They Do and Why They Matter

Dev

Hashing Explained: MD5 vs SHA-256 and Why a Hash Only Goes One Way

Base64 Explained: How Binary Becomes Text — and Why It's Not Encryption

JWTs Explained: What's Actually Inside a JSON Web Token