When the web was new, I thought Postel's Law was a great idea. It sounds great, and very utopian. Now that I work in security (and still mess around in code), I've come to the conclusion that defining correct input, and enforcing it, is key to anything working well at all.
So many web vulnerabilities seem to come from trying to "do the right thing" with bad inputs. XSS in error messages, or giving up too much information. "400, your request is bad, and you should feel bad" is better.
Tim Lavoie
npub1a8…s6mu0
2025-10-20 18:24:45 UTC
in reply to nevent1q…kqmt
Author Public Key
npub1a8k5h7agfqgemgfswn35q209my0knaef0yfjp4xhjgreytg2f09qks6mu0Seen on
wss://relay.momostr.pinkPublished at
2025-10-20 18:24:45 UTCEvent JSON
{
"id": "8973b14e866f09425704c9d99b360f4d805b3a72e6e47a6572f22614747d637c",
"pubkey": "e9ed4bfba848119da13074e34029e5d91f69f729791320d4d79207922d0a4bca",
"created_at": 1760984685,
"kind": 1,
"tags": [
[
"e",
"3fd7467a36ba846c53e2278cf2a1dca7935ad367b08d8eaf9b5cf20e95a761fc",
"",
"root",
"cf43835b13f30091125ef6fd23d1d85209f81cfbc74296370bc0c65eb74a0dc0"
],
[
"p",
"cf43835b13f30091125ef6fd23d1d85209f81cfbc74296370bc0c65eb74a0dc0"
],
[
"proxy",
"https://cosocial.ca/@tim_lavoie/115407892370526482",
"web"
],
[
"proxy",
"https://cosocial.ca/users/tim_lavoie/statuses/115407892370526482",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://cosocial.ca/users/tim_lavoie/statuses/115407892370526482",
"pink.momostr"
],
[
"-"
]
],
"content": "When the web was new, I thought Postel's Law was a great idea. It sounds great, and very utopian. Now that I work in security (and still mess around in code), I've come to the conclusion that defining correct input, and enforcing it, is key to anything working well at all. \n\nSo many web vulnerabilities seem to come from trying to \"do the right thing\" with bad inputs. XSS in error messages, or giving up too much information. \"400, your request is bad, and you should feel bad\" is better.",
"sig": "a5155a83c10ec3580e57578281795f58c1a75e389583659a90c0eeff6a04fa725ac4f21b73bd548490be058933619e7c4ac4f7305be97be7858ef5a8313af7ac"
}