The notes are original operational summaries. This page lists the core static-site references used for protocol details, server behavior, and command examples. Broader topics in the Posts section cite their own references. The links are the authority; the summaries on this site are not substitutes for reading the relevant specification.

Individual notes record dates for their source checks. Those dates describe the recorded check, not a guarantee of current reachability or of every claim in an article. A successful link request alone does not establish that the source supports a conclusion, and an upstream document can change after it was consulted.

HTTP and discovery

ReferenceUsed for
RFC 9110 — HTTP SemanticsStatus codes, validators, conditional requests, and redirect semantics.
RFC 9111 — HTTP CachingFreshness, revalidation, Cache-Control, Age, and Vary.
RFC 7538 — 308 Permanent RedirectHistorical 308 definition; RFC 9110 section 15.4.9 is the current reference.
RFC 9309 — Robots Exclusion ProtocolThe /robots.txt file, parsing, and crawler scope.
RFC 1034 — Domain Names: Concepts and FacilitiesDNS caching and resolver behavior.
RFC 1035 — Domain Names: Implementation and SpecificationRecord formats and TTL fields.
RFC 2308 — Negative Caching of DNS QueriesCached negative answers and their lifetime.
Sitemaps ProtocolXML encoding, host scope, and sitemap size limits.
MDN: Cache-ControlPractical examples and browser-facing terminology.
MDN: Content Security PolicyResource policies and deployment guidance.
MDN: Strict-Transport-SecurityHTTPS-only browser policy and deployment cautions.
MDN: Content-TypeMedia types and character-set metadata.
MDN: X-Content-Type-Optionsnosniff behavior for script and style destinations.
curl manualHEAD, Range, header, redirect, and transport inspection commands.

Release and recovery

ReferenceUsed for
POSIX rename()Same-filesystem name replacement and the limits on replacing directories.
Linux rename(2)Filesystem and replacement behavior.
GNU tar manualArtifact transport and extraction.
GNU Coreutils: sha2 utilitiesPer-file release manifests and checksum verification.
sha256sum(1)Checksum command behavior and output format.
systemd.timer(5)Calendar timers, persistence, and randomized delay.
systemd.time(7)Calendar expression syntax.

Servers and operations

ReferenceUsed for
Caddy: file_serverStatic file serving and root selection.
Caddy: headerResponse-header configuration.
Caddy: encodeNegotiated response compression.
Caddy: Automatic HTTPSCertificate provisioning and HTTPS redirects.
systemd.serviceType=, restart behavior, and start-rate limiting.
systemd.unitUnit dependencies and start-limit settings.
OpenBSD ssh_configStrictHostKeyChecking and known-host handling.
OpenBSD ssh-keygenHost-key fingerprint inspection.
OpenSSL s_clientTLS connection and SNI inspection.
OpenSSL x509Certificate dates, fingerprints, and expiry checks.
Hugo command referenceClean static-site builds and command options.
Hugo directory structureSource, layout, asset, and static-file boundaries.

Web security

ReferenceUsed for
RFC 8659 — DNS Certification Authority AuthorizationCAA lookup and issuer authorization.
Let’s Encrypt: CAAIssuer identifiers and CAA operations.
RFC 6797 — HTTP Strict Transport SecurityHSTS policy processing and scope.
RFC 6265 — HTTP State Management MechanismCookie storage, domain, path, and deletion behavior.
MDN: Set-CookieCookie attributes and name prefixes.
RFC 5280 — X.509 Public Key InfrastructureCertificate paths, intermediate, and trust-anchor validation.
RFC 8446 — TLS 1.3Certificate presentation in the TLS handshake.
Let’s Encrypt: Chains of TrustIntermediate issuance and chain presentation.

The site does not claim affiliation with any of these projects. Their names and documents remain the property of their respective authors and maintainers.