DEV Community

Merlonix profile picture

Merlonix

404 bio not found

Joined Joined on 
Your Single-Page App Serves an Empty Page to an AI Crawler

Your Single-Page App Serves an Empty Page to an AI Crawler

Comments 1
5 min read
Detecting a Meaningful Page Change: A Content Hash, a Line Diff, and Why the AI Summary Runs Last

Detecting a Meaningful Page Change: A Content Hash, a Line Diff, and Why the AI Summary Runs Last

Comments 1
7 min read
Hidden Text an AI Agent Reads but a Human Cannot

Hidden Text an AI Agent Reads but a Human Cannot

1
Comments
5 min read
Sending User Data to an LLM? Redact It First — and Order Your Defenses So the AI Can Only Make Them Stricter

Sending User Data to an LLM? Redact It First — and Order Your Defenses So the AI Can Only Make Them Stricter

1
Comments
4 min read
Verifying a Webhook Signature: The Raw-Body Trap, Verify-Before-Parse, and When a Timestamp Window Is Just Theater

Verifying a Webhook Signature: The Raw-Body Trap, Verify-Before-Parse, and When a Timestamp Window Is Just Theater

1
Comments
6 min read
An HTTP 200 Is Not Uptime: The Monitor Went Green While the Page Served an Error

An HTTP 200 Is Not Uptime: The Monitor Went Green While the Page Served an Error

1
Comments
6 min read
DNS record drift: what causes it, why uptime checks miss it, and how to detect it

DNS record drift: what causes it, why uptime checks miss it, and how to detect it

1
Comments
4 min read
GitHub Pages Silently Fails to Provision SSL — and the “Enforce HTTPS” Checkbox Stays Checked Anyway

GitHub Pages Silently Fails to Provision SSL — and the “Enforce HTTPS” Checkbox Stays Checked Anyway

1
Comments
4 min read
Your Certificate Is Valid and Your Site Loads Fine — and Your TLS Still Grades Weak

Your Certificate Is Valid and Your Site Loads Fine — and Your TLS Still Grades Weak

1
Comments
5 min read
A Dead-Man's Switch That Pages Once and Goes Quiet Is Worse Than None. Ours Went Silent for 43 Days.

A Dead-Man's Switch That Pages Once and Goes Quiet Is Worse Than None. Ours Went Silent for 43 Days.

1
Comments
6 min read
A Dangling CNAME Is a Subdomain Takeover Waiting to Happen — and DNS Still Resolves Fine

A Dangling CNAME Is a Subdomain Takeover Waiting to Happen — and DNS Still Resolves Fine

1
Comments
6 min read
A Port Check Has Three Answers, Not Two — ‘Open’, ‘Closed’, and ‘I Don’t Know’

A Port Check Has Three Answers, Not Two — ‘Open’, ‘Closed’, and ‘I Don’t Know’

1
Comments
7 min read
Your security.txt Has an Expiry Date — and It Is Probably Already Stale

Your security.txt Has an Expiry Date — and It Is Probably Already Stale

1
Comments
5 min read
Automated Cert Renewal Fails Silently — and the 47-Day Cliff Turns 'If' Into 'When'

Automated Cert Renewal Fails Silently — and the 47-Day Cliff Turns 'If' Into 'When'

1
Comments
5 min read
A CAA Record Decides Who Can Issue Your Certificates. Almost Nobody Watches It.

A CAA Record Decides Who Can Issue Your Certificates. Almost Nobody Watches It.

1
Comments
6 min read
DNSSEC Fails Closed: A Broken Signature Is a SERVFAIL, Not a Warning

DNSSEC Fails Closed: A Broken Signature Is a SERVFAIL, Not a Warning

1
Comments
6 min read
Someone Can Get an SSL Certificate for Your Domain. CT Logs Are How You Find Out.

Someone Can Get an SSL Certificate for Your Domain. CT Logs Are How You Find Out.

1
Comments
6 min read
Your PageSpeed Score Is a Lab Test. Google Ranks You on Field Data.

Your PageSpeed Score Is a Lab Test. Google Ranks You on Field Data.

1
Comments
6 min read
Running a Public Status Page for Your MCP Server

Running a Public Status Page for Your MCP Server

1
Comments
7 min read
'Does ChatGPT Mention My Brand?' Is Three Different Questions

'Does ChatGPT Mention My Brand?' Is Three Different Questions

2
Comments 1
6 min read
A Broken-Link Check Counts 404s. The Resource That Breaks Your Padlock Returns 200.

A Broken-Link Check Counts 404s. The Resource That Breaks Your Padlock Returns 200.

1
Comments
5 min read
Is My Domain Blacklisted? Why a Public DNSBL Check Can Show a False Positive

Is My Domain Blacklisted? Why a Public DNSBL Check Can Show a False Positive

2
Comments
5 min read
A Security-Headers Grade Counts Headers. It Doesn’t Test Them.

A Security-Headers Grade Counts Headers. It Doesn’t Test Them.

1
Comments
5 min read
SPF, DKIM, and DMARC: Why “Valid” Records Still Let Your Domain Be Spoofed

SPF, DKIM, and DMARC: Why “Valid” Records Still Let Your Domain Be Spoofed

1
Comments
6 min read
Structured Data for AI Answer Engines: Why JSON-LD Decides Whether You Get Cited

Structured Data for AI Answer Engines: Why JSON-LD Decides Whether You Get Cited

1
Comments 1
7 min read
llms.txt Explained: What It Is, Whether AI Answer Engines Read It, and How to Write One

llms.txt Explained: What It Is, Whether AI Answer Engines Read It, and How to Write One

1
Comments
7 min read
robots.txt for AI Crawlers: Why Blocking GPTBot Doesn’t Remove You From ChatGPT

robots.txt for AI Crawlers: Why Blocking GPTBot Doesn’t Remove You From ChatGPT

1
Comments
8 min read
Domain Expiry vs SSL Expiry: Two Clocks, Two Very Different Outages

Domain Expiry vs SSL Expiry: Two Clocks, Two Very Different Outages

1
Comments
6 min read
ERR_SSL_PROTOCOL_ERROR: When the Handshake Fails Before the Certificate

ERR_SSL_PROTOCOL_ERROR: When the Handshake Fails Before the Certificate

1
Comments 1
8 min read
NET::ERR_CERT_AUTHORITY_INVALID: When the Root Itself Is Not Trusted

NET::ERR_CERT_AUTHORITY_INVALID: When the Root Itself Is Not Trusted

1
Comments
8 min read
SSL Certificate Name Mismatch: NET::ERR_CERT_COMMON_NAME_INVALID

SSL Certificate Name Mismatch: NET::ERR_CERT_COMMON_NAME_INVALID

1
Comments
7 min read
SSL Certificate Problem: Unable to Get Local Issuer Certificate

SSL Certificate Problem: Unable to Get Local Issuer Certificate

1
Comments
7 min read
You Can't Monitor Your Cloudflare App From Cloudflare

You Can't Monitor Your Cloudflare App From Cloudflare

2
Comments
6 min read
Your MCP Server Connects but Shows No Tools

Your MCP Server Connects but Shows No Tools

Comments
7 min read
Running a Monitoring SaaS on Cloudflare Workers + Supabase for Almost Nothing

Running a Monitoring SaaS on Cloudflare Workers + Supabase for Almost Nothing

Comments
6 min read
Debugging a 401 From a Remote MCP Server

Debugging a 401 From a Remote MCP Server

1
Comments 2
7 min read
Detecting Tool + Schema Drift in a Remote MCP Server

Detecting Tool + Schema Drift in a Remote MCP Server

1
Comments 1
6 min read
How Many MCP Tools Is Too Many? Tool Count, Selection & Overload

How Many MCP Tools Is Too Many? Tool Count, Selection & Overload

Comments 1
6 min read
MCP SSE vs Streamable HTTP: Differences + How to Detect

MCP SSE vs Streamable HTTP: Differences + How to Detect

Comments
6 min read
How to Convert a REST API into an MCP Server (OpenAPI to MCP)

How to Convert a REST API into an MCP Server (OpenAPI to MCP)

Comments
7 min read
A Security Checklist for Remote MCP Servers

A Security Checklist for Remote MCP Servers

1
Comments 1
7 min read
Tool Poisoning: How a Hidden Instruction in Your OpenAPI Spec Can Hijack an AI Agent

Tool Poisoning: How a Hidden Instruction in Your OpenAPI Spec Can Hijack an AI Agent

1
Comments 2
6 min read
How to Health-Check a Remote MCP Server (HTTP 200 Is Not Enough)

How to Health-Check a Remote MCP Server (HTTP 200 Is Not Enough)

1
Comments
5 min read
Why MCP initialize Fails: A Diagnostic Taxonomy

Why MCP initialize Fails: A Diagnostic Taxonomy

1
Comments
6 min read
An AI Agent Has Run This SaaS for 580+ Sessions. It Has Zero Customers.

An AI Agent Has Run This SaaS for 580+ Sessions. It Has Zero Customers.

Comments
6 min read
We Health-Checked 86 Public MCP Servers. Not One Uses the Legacy Transport.

We Health-Checked 86 Public MCP Servers. Not One Uses the Legacy Transport.

1
Comments 1
5 min read
loading...