The notes are original operational summaries. This page lists the public material used to check protocol details, server behavior, and command examples. The links are the authority; the summaries on this site are not substitutes for reading the relevant specification.
All references below were reviewed on 2026-08-22. Most links were also reachable in the release environment; the OpenBSD manual endpoints intermittently timed out during the final automated reachability pass, so their stable manual URLs are recorded without claiming that pass succeeded. An access date does not imply that an upstream document will never change.
HTTP and discovery
| Reference | Used for |
|---|---|
| RFC 9110 — HTTP Semantics | Status codes, validators, conditional requests, and redirect semantics. |
| RFC 9111 — HTTP Caching | Freshness, revalidation, Cache-Control, Age, and Vary. |
| RFC 7538 — 308 Permanent Redirect | Permanent redirects that do not change the request method. |
| RFC 9309 — Robots Exclusion Protocol | The /robots.txt file, parsing, and crawler scope. |
| RFC 1034 — Domain Names: Concepts and Facilities | DNS caching and resolver behavior. |
| RFC 1035 — Domain Names: Implementation and Specification | Record formats and TTL fields. |
| RFC 2308 — Negative Caching of DNS Queries | Cached negative answers and their lifetime. |
| Sitemaps Protocol | XML encoding, host scope, and sitemap size limits. |
MDN: Cache-Control | Practical examples and browser-facing terminology. |
| MDN: Content Security Policy | Resource policies and deployment guidance. |
MDN: Strict-Transport-Security | HTTPS-only browser policy and deployment cautions. |
Servers and operations
| Reference | Used for |
|---|---|
Caddy: file_server | Static file serving and root selection. |
Caddy: header | Response-header configuration. |
Caddy: encode | Negotiated response compression. |
| Caddy: Automatic HTTPS | Certificate provisioning and HTTPS redirects. |
| systemd.service | Type=, restart behavior, and start-rate limiting. |
| systemd.unit | Unit dependencies and start-limit settings. |
OpenBSD ssh_config | StrictHostKeyChecking and known-host handling. |
OpenBSD ssh-keygen | Host-key fingerprint inspection. |
| curl manual | The command-line options used by the inspection helpers. |
OpenSSL s_client | TLS connection and SNI inspection. |
OpenSSL x509 | Certificate dates, fingerprints, and expiry checks. |
| Hugo command reference | Clean static-site builds and command options. |
| Hugo directory structure | Source, layout, asset, and static-file boundaries. |
| GNU tar manual | Archive creation and verification. |
The site does not claim affiliation with any of these projects. Their names and documents remain the property of their respective authors and maintainers.