---
title: "Curing CSRF with 'same site' cookies, and how ICANN can block access to your site"
publication: "StatusCode Weekly"
issue: 104
published_at: "2017-02-22"
canonical_url: "https://weekly.statuscode.com/issues/104"
---

WebOps Weekly 104   . 

The latest Web operations, HTTP, and Web performance news -[Read this on the Web](http://webopsweekly.com/issues/104) 

[![WebOps Weekly\](http://webopsweekly.com/images/webops-header.png)](http://webopsweekly.com) Issue 104 — February 22, 2017     

[A Cookie-Based Cure for Cross-Site Request Forgery](https://scotthelme.co.uk/csrf-is-dead/?utm_source=webopsweekly&utm_medium=email) news _Same Site_ cookies alleviate the most common cross-site request attacks by not allowing browsers to send cookies on cross-origin requests. However, there is some nuance to their use and [only Chrome and Opera support them](http://caniuse.com/#feat=same-site-cookie-attribute) for now. Scott Helme [How ICANN Rules Could Restrict Access To Your Site](https://levels.io/icann-mafia/?utm_source=webopsweekly&utm_medium=email) story The situation is now over but this is the tale of how ICANN took someone’s site ‘hostage’ after they accidentally left old contact details on their domain’s WHOIS record. You might want to check your own domains now. Pieter Levels [The Evolution of Business Logic from Monoliths to Functions](https://medium.com/@adrianco/evolution-of-business-logic-from-monoliths-through-microservices-to-functions-ff464b95a44d?utm_source=webopsweekly&utm_medium=email) opinion The VP of Cloud Architecture Strategy at AWS reflects on the evolution from monolithic apps to microservices and, now, on to functions. Adrian Cockcroft [Free eBook: A Beginner's Guide to the Dockerfile](https://resources.codeship.com/ebooks/dockerfile-guide-aw?utm_medium=cpc-webops-weekly-primary&utm_campaign=cooper-dockerfile-guide-ebook-campaign) Download our free eBook and learn how to create a Dockerfile from scratch, how to push images to Docker Hub, and some Dockerfile best practices. Codeshipsponsored[![\](https://copm.s3.amazonaws.com/e3564d4d.png)](https://resources.codeship.com/ebooks/dockerfile-guide-aw?utm_medium=cpc-webops-weekly-primary&utm_campaign=cooper-dockerfile-guide-ebook-campaign) [Container Orchestration Tool Comparison](https://github.com/KaivoAnastetiks/container-orchestration-comparison?utm_source=webopsweekly&utm_medium=email) tools Quick table-based comparison of Docker Swarm, Kubernetes, Mesos and Nomad for how they deal with things like service discovery and secret management. Kaivo Anastetiks [HTTP/2 - A Real-World Performance Test and Analysis](https://css-tricks.com/http2-real-world-performance-test-analysis/?utm_source=webopsweekly&utm_medium=email) A short but sweet introduction to HTTP/2, followed up by benchmarking of six different scenarios and ways in which you might use HTTP/2 now. David Attard [Containers As A Service, The Foundation for Next Generation PaaS](http://blog.kubernetes.io/2017/02/caas-the-foundation-for-next-gen-paas.html?utm_source=webopsweekly&utm_medium=email) news Thoughts on how container orchestrators like Kubernetes form the foundation for next generation platform as a service (PaaS). Brendan Burns [The GraphQL Data Query Language: A Resource Guide](https://thenewstack.io/graphql-data-query-language-resource-guide/?utm_source=webopsweekly&utm_medium=email) tutorial GraphQL is rapidly emerging as a viable alternative for the creation and publication of APIs. The New Stack [How We Built A Backend System for an Uber-Like Live Map](https://blog.maddevs.io/how-we-built-a-backend-system-for-uber-like-map-with-animated-cars-on-it-using-go-29d5dcd517a?utm_source=webopsweekly&utm_medium=email#.qhs1tq2gh) story Considerations while building an Uber-style map with live, moving cars on it. They ended up using UDP+Protobuf, in memory storage, and OpenStreetMap Routing Machine. Andrew Minkin [Concurrency and Parallelism: Understanding I/O](https://blog.risingstack.com/concurrency-and-parallelism-understanding-i-o/?utm_source=webopsweekly&utm_medium=email) tutorial The start of a series of posts on writing concurrent applications, first looking at how the OS schedules our apps’ IO operations. Dávid Szakállas Jobs [Senior Ops and Data Platform Engineers at FreeAgent (Edinburgh or remote UK)](https://www.freeagent.com/careers) Want to work on a high-traffic, popular web app? Come and talk to us about Ruby, SmartOS, MySQL, Kafka or burritos. FreeAgent [QA Automation Engineer at X-Team (Remote)](https://x-team.com/qa-automation-engineer/?utm_source=newsletter&utm_medium=email&utm_campaign=web-ops-february-22-17) We're looking for a QA Automation Engineer with an extensive knowledge of automation frameworks. We are 100% remote and we provide the funding needed to help you achieve your goals and grow. X-Team In brief [Docker Switching To New Versioning Scheme](https://github.com/docker/docker/pull/31075?utm_source=webopsweekly&utm_medium=email) news Releases will be versioned by the year and month. Docker [GitLab Now Offers Free Static Web Page Hosting](https://thenewstack.io/gitlab-releases-free-static-web-page-hosting/?utm_source=webopsweekly&utm_medium=email) news The New Stack [Kubernetes Now Generally Available on Azure Container Service](https://azure.microsoft.com/en-us/blog/kubernetes-now-generally-available-on-azure-container-service/?utm_source=webopsweekly&utm_medium=email) news Microsoft [OpenStack Sets Its Sights On The Next Generation of Private Clouds](https://techcrunch.com/2017/02/22/openstacks-latest-release-focuses-on-containers/?utm_source=webopsweekly&utm_medium=email) news TechCrunch [GPUs Now Available for Google Compute Engine and Cloud Machine Learning](https://cloudplatform.googleblog.com/2017/02/GPUs-are-now-available-for-Google-Compute-Engine-and-Cloud-Machine-Learning.html?utm_source=webopsweekly&utm_medium=email) news Google Cloud Platform [[eBook\] The Performance Impact of Tags 2.0](http://pages.catchpoint.com/Performance-Impact-of-Tags-2.0.html) All-new data on the impact of third-party tags on websites and tips to minimize their risk. Catchpointsponsored [Let's Encrypt, OAuth 2, and Kubernetes Ingress](https://eng.fromatob.com/post/2017/02/lets-encrypt-oauth-2-and-kubernetes-ingress/?utm_source=webopsweekly&utm_medium=email) tutorial Ian Chiles [A Guide to Kubernetes, Mesosphere, and Docker Swarm](https://insights.hpe.com/content/hpe-nxt/en/articles/2017/02/the-basics-explaining-kubernetes-mesosphere-and-docker-swarm.html?utm_source=webopsweekly&utm_medium=email) tutorial Steven Vaughan-Nichols [Debugging Event-Driven Microservices](https://runnable.com/blog/debugging-event-driven-microservices?utm_source=webopsweekly&utm_medium=email) tutorial It can be tricky when logging is distributed, but here’s one approach. Ryan Kahn [LED-it-GO: Leaking Data From Computers via the Hard Drive LED](http://cyber.bgu.ac.il/advanced-cyber/?utm_source=webopsweekly&utm_medium=email) story Server security can be circumvented in the most creative of ways.. Cyber-Security Research at Ben-Gurion University [Apache Kafka vs Amazon Kinesis to Build a High Perf Distributed System](https://keen.io/blog/157206265381/apache-kafka-vs-amazon-kinesis-to-build-a-high?s=lbst&utm_source=webopsweekly&utm_medium=email) opinion Keen Labs [Who Wins The Three-Way Cloud Battle? Google Vs. Azure Vs. AWS](http://readwrite.com/2017/02/20/wins-three-way-cloud-battle-google-vs-azure-vs-aws-dl1/?utm_source=webopsweekly&utm_medium=email) opinion Damien Wolf [Linode Cloud Hosting brings unmatched virtual performance at great prices.](https://welcome.linode.com/webopsweekly/?utm_source=cooperpress&utm_medium=email&utm_term=webops-weekly&utm_campaign=webops-weekly-sponsored) tools Get full root access on any Linux distribution you want for only $10 per month, all with SSD storage included. Linodesponsored [Bombardier 1.0: An HTTP Benchmarking Tool (Written in Go)](https://github.com/codesenberg/bombardier?utm_source=webopsweekly&utm_medium=email) tools Uses fasthttp for improved performance. Максим Федосеев [micro-auth: A Microservice To Add Auth with Google and GitHub to Your App](https://github.com/hypebeast/micro-auth?utm_source=webopsweekly&utm_medium=email) code Sebastian Ruml [s3-lambda: Lambda Functions over AWS S3 Objects with Concurrency Control](https://github.com/littlstar/s3-lambda?utm_source=webopsweekly&utm_medium=email) code Little Star Media    [Read this issue on the Web](http://webopsweekly.com/issues/104) [See our archives](http://webopsweekly.com/issues) [Change your email address](*|UPDATE_PROFILE|*)  [Stop getting this newsletter](*|UNSUB|*)  

Published by [Cooperpress](https://cooperpress.com/)
Fairfield Enterprise Centre, Lincoln Way, Louth, LN11 0LS, UK