Do you want to know what your phone is sending & receiving? Nowadays, that means you need to control who it trusts. In modern connections everything sent &...

When you call end(data) on an outgoing HTTP request, we previously wrote the data, and then ran _send('', ...) just to trigger flushing the headers, which resulted in an extra zero-byte wri...

A walk through a modern apartment, through the eyes of the people for whom everything in it was new.

Episode 214 of Green Squares.

The intended magic number string was changed to from QS0 to QMX when the spec was renamed (#14) and the description shows this correctly, but the hex value was not updated anywhere. The magic numbe...

TLS fingerprint control within Node.js's normal networking APIs - httptoolkit/node-tls-impersonate

Endpoints can be combined using double-dashes, e.g. expired--revoked--http2--tls-v1-2.{domain} will return an expired and revoked certificate, use TLSv1.2, and then negotiate HTTP/2 on the connection.

View more about this event at Dataharvest 2026 - the European Investigative Journalism Conference

Documentation for the npm registry, website, and command-line interface

Secure your applications with Artifact Signing (formerly Azure Trusted Signing), a fully managed end-to-end signing service for code, documents, and applications.

A new FSFE report exposes how 56 interoperability requests under the Digital Markets Act have produced no concrete solutions by Apple, and how their declin...

The risk that cryptographically-relevant quantum computers materialize within the next few years is now high enough to be dispositive, unfortunately.

A pure-JS module to read TLS client hello data and calculate TLS fingerprints from an incoming socket connection. - httptoolkit/read-tls-client-hello

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

Until now, we've fully disabled all compression features in OpenSSL via no-comp. This PR: Removes no-comp from our OpenSSL build, so we can use some compression features. This is required beca...

The Web streams API has become ubiquitous in JavaScript runtimes but was designed for a different era. Here's what a modern streaming API could (should?) look like.

The Open Source Endowment provides truly sustainable funding for critical open source software through a community-driven endowment model.

:question: Git hook to catch placeholders and temporary changes (TODO / @ignore) before you commit or push them. - pimterry/git-confirm

Dictionary compression could completely change how applications send data over the web. It's recently gained broad support, and offers absurd real-world...

As we head into 2026, we're entering a new phase for the Bluesky app. Last year was about scaling through rapid growth and getting the fundamentals in place. This year is about leaning into what's wor...

The library for web and native user interfaces