The notes are original operational summaries. This page lists the public material used to check protocol details, server behavior, and command examples. The links are the authority; the summaries on this site are not substitutes for reading the relevant specification.

The initial reference set was reviewed on 2026-08-22; references added with the current release were reviewed on 2026-08-23. Each note records the date for its own sources. Most links were also reachable in the release environment; the OpenBSD manual endpoints intermittently timed out during the final automated reachability pass, so their stable manual URLs are recorded without claiming that pass succeeded. An access date does not imply that an upstream document will never change.

HTTP and discovery

ReferenceUsed for
RFC 9110 — HTTP SemanticsStatus codes, validators, conditional requests, and redirect semantics.
RFC 9111 — HTTP CachingFreshness, revalidation, Cache-Control, Age, and Vary.
RFC 7538 — 308 Permanent RedirectPermanent redirects that do not change the request method.
RFC 9309 — Robots Exclusion ProtocolThe /robots.txt file, parsing, and crawler scope.
RFC 1034 — Domain Names: Concepts and FacilitiesDNS caching and resolver behavior.
RFC 1035 — Domain Names: Implementation and SpecificationRecord formats and TTL fields.
RFC 2308 — Negative Caching of DNS QueriesCached negative answers and their lifetime.
Sitemaps ProtocolXML encoding, host scope, and sitemap size limits.
MDN: Cache-ControlPractical examples and browser-facing terminology.
MDN: Content Security PolicyResource policies and deployment guidance.
MDN: Strict-Transport-SecurityHTTPS-only browser policy and deployment cautions.
MDN: Content-TypeMedia types and character-set metadata.
MDN: X-Content-Type-Optionsnosniff behavior for script and style destinations.
curl manualHEAD, Range, header, redirect, and transport inspection commands.

Release and recovery

ReferenceUsed for
POSIX rename()Complete-directory publication and name replacement.
Linux rename(2)Filesystem and replacement behavior.
GNU tar manualArtifact transport and extraction.
GNU Coreutils: sha2 utilitiesPer-file release manifests and checksum verification.
sha256sum(1)Checksum command behavior and output format.
systemd.timer(5)Calendar timers, persistence, and randomized delay.
systemd.time(7)Calendar expression syntax.

Servers and operations

ReferenceUsed for
Caddy: file_serverStatic file serving and root selection.
Caddy: headerResponse-header configuration.
Caddy: encodeNegotiated response compression.
Caddy: Automatic HTTPSCertificate provisioning and HTTPS redirects.
systemd.serviceType=, restart behavior, and start-rate limiting.
systemd.unitUnit dependencies and start-limit settings.
OpenBSD ssh_configStrictHostKeyChecking and known-host handling.
OpenBSD ssh-keygenHost-key fingerprint inspection.
OpenSSL s_clientTLS connection and SNI inspection.
OpenSSL x509Certificate dates, fingerprints, and expiry checks.
Hugo command referenceClean static-site builds and command options.
Hugo directory structureSource, layout, asset, and static-file boundaries.

Web security

ReferenceUsed for
RFC 8659 — DNS Certification Authority AuthorizationCAA lookup and issuer authorization.
Let’s Encrypt: CAAIssuer identifiers and CAA operations.
RFC 6797 — HTTP Strict Transport SecurityHSTS policy processing and scope.
RFC 6265 — HTTP State Management MechanismCookie storage, domain, path, and deletion behavior.
MDN: Set-CookieCookie attributes and name prefixes.
RFC 5280 — X.509 Public Key InfrastructureCertificate paths, intermediate, and trust-anchor validation.
RFC 8446 — TLS 1.3Certificate presentation in the TLS handshake.
Let’s Encrypt: Certificate ChainsIntermediate issuance and chain presentation.

The site does not claim affiliation with any of these projects. Their names and documents remain the property of their respective authors and maintainers.