Logo

Rob Helmer's blog posts matching the tag: security

←Browse all blog postsorbrowse by tag→

Diagram of a browser form challenge verifying a token with a Cloudflare Worker.

8/16/2026 · 5 min read

Add Cloudflare Turnstile to Astro Forms and Workers

How I added Cloudflare Turnstile to an Astro newsletter form and verified tokens in a Worker: keys, CI, deploy order, and DevTools noise.

Architecture diagram showing OAuth provider, auth worker encrypting PII with public key, ciphertext-only database, and separate email worker with private key.

3/24/2026 · 11 min read

Asymmetric Encryption for Player PII in Multiplayer Games

How HPKE encryption protects user email addresses and personal data so the server can't read them even if compromised.

Sequence diagram showing secure authentication flow with HttpOnly cookies between user, browser, auth server, and game server.

3/17/2026 · 7 min read

Building Secure Login Systems with HttpOnly Cookies

How HttpOnly cookies with CHIPS prevent XSS attacks and cross-site tracking while maintaining seamless authentication across subdomains.

Connect

Find me on:

BlueSky

Mastodon

X (formerly Twitter)

LinkedIn

Mail

GitHub