Privacy by Design is Not a Cookie Banner
Privacy by design means building safer data handling into platforms, analytics, CRM integrations, and workflows from the start, not relying on banners later.
Articles
Security
Security in web development is not a separate phase you tack on at the end. It shows up in authentication, request boundaries, browser policy, dependency choices, and the defaults we ship. A lot of front‑end security work is really about removing avoidable trust mistakes before they become production incidents.
Below you will find a subset of articles from my blog specifically about Security. This is an area I have worked with for many years, and it has been a regular subject in my writing. There are nine articles collected together for you below.
Privacy by Design is Not a Cookie Banner. 
What is a Timing Attack? Side Channels, Examples, and Safer Comparisons. What is a Timing Attack? Side Channels, Examples, and Safer Comparisons
Timing attacks explained for web developers, including side channels, string comparisons, real examples, and practical defences in JavaScript.
Content Security Policy in Next.js: Static Pages, Nonces, and Real‑World Trade‑Offs. Content Security Policy in Next.js: Static Pages, Nonces, and Real‑World Trade‑Offs
Plan Content Security Policy in Next.js with static pages, nonces, third‑party scripts, headers, frames, previews, and incremental deployment safely.
Responsible AI Needs an Owner. Responsible AI Needs an Owner
Responsible AI becomes real only when decision ownership, data handling, audit trails, exceptions, procurement, and support are assigned to people.
NextAuth Works Locally but Fails in Production. NextAuth Works Locally but Fails in Production
How to debug NextAuth when it works locally but fails in production, covering callback URLs, cookies, secrets, middleware, providers, and Vercel.
Owasp Top Ten: What Web Engineers Should Know. Owasp Top Ten: What Web Engineers Should Know
A candid look at the OWASP Top Ten for web engineers, covering the 2021 risks, front‑end boundaries, platform decisions, and practical next steps.
Implementing Authentication in Next.js Using NextAuth.js. Implementing Authentication in Next.js Using NextAuth.js
A practical guide to implementing authentication in Next.js with NextAuth.js, including sessions, callbacks, route protection, and router‑specific trade‑offs.
Why You Should Not Use Protocol‑Relative URLs. Why You Should Not Use Protocol‑Relative URLs
Avoid protocol‑relative URLs on modern sites, with reasons around HTTPS, security, performance, browser expectations, and clearer absolute resource loading.
What is CORS and Why is My JavaScript fetch Blocked? What is CORS and Why is My JavaScript
fetchBlocked?CORS explained for JavaScript fetch errors, including same‑origin policy, server opt‑in, preflight requests, credentials, and what front‑end code can fix.