Engineering Insights

CRLite: Fast, private, and comprehensive certificate revocation checking in Firefox

Firefox is now the first and the only browser to deploy fast and comprehensive certificate revocation checking that does not reveal your browsing activity to anyone (not even to Mozilla). Tens of millions of TLS server certificates are issued each day to secure communications between browsers and websites. These certificates are the cornerstones of ubiquitous […] The post CRLite: Fast, private, and comprehensive certificate revocation checking in Firefox appeared first on Mozilla Hacks - the Web

Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling

Sometimes people think they've found HTTP request smuggling, when they're actually just observing HTTP keep-alive or pipelining. This is usually a false positive, but sometimes there's actually a real

Node.js Vercel Functions now support fetch web handlers

Vercel Functions running on the Node.js runtime now support the web handlers, improving interoperability across JavaScript runtimes and frameworks. fetch You can still , if preferred.export individual HTTP methods Learn more about .fetch web handlers in the docs Read more

Agents can now access protected deployments via Vercel’s MCP server

Two new tools are now available in Vercel’s MCP server: Get started with the .Vercel MCP server Read more Generates a that allows agent tools such as web fetch or Playwright to access deployments protected by . The URL is temporary and grants access without requiring login credentials.get_access_to_vercel_url shareable URLVercel Authentication Allows agents to directly fetch content from deployments , even if a normal fetch would return or .web_fetch_vercel_url protected by Vercel Authentic

Queues - Subscribe to events from Cloudflare services with Queues

You can now subscribe to events from other Cloudflare services (for example, Workers KV, Workers AI, Workers) and consume those events via Queues, allowing you to build custom workflows, integrations, and logic in response to account activity. Event subscriptions allow you to receive messages when events occur across your Cloudflare account. Cloudflare products can publish structured events to a queue, which you can then consume with Workers or pull via HTTP from anywhere. To create a subscript

Workers - Easier debugging in Workers with improved Wrangler error screen

Wrangler's error screen has received several improvements to enhance your debugging experience! The error screen now features a refreshed design thanks to youch, with support for both light and dark themes, improved source map resolution logic that handles missing source files more reliably, and better error cause display. BeforeAfter (Light)After (Dark) Try it out now with npx wrangler@latest dev in your Workers project.

Generate Images with Claude and Hugging Face

Next.js 15.5

Next.js 15.5 includes Turbopack builds in beta, stable Node.js middleware, TypeScript improvements, `next lint` deprecation, and deprecation warnings for Next.js 16.