Chad Killingsworth

300 posts

Chad Killingsworth

Chad Killingsworth

@chadhikes

Chad leads engineering for the Banno platform at Jack Henry & Associates where he builds modern online banking experiences for US banks using web components.

Springfield, MO, USA Katılım Nisan 2010
17 Takip Edilen266 Takipçiler
Chad Killingsworth retweetledi
Malte Ubl
Malte Ubl@cramforce·
You can just ship things
Malte Ubl tweet media
English
6
62
792
65.6K
Chad Killingsworth
Chad Killingsworth@chadhikes·
@cramforce My favorite task is to work on core vitals scores for our app for this very reason. Another good one is to improve automated tests. Nobody gives love to test suites.
English
0
0
3
39
Chad Killingsworth
Chad Killingsworth@chadhikes·
@cramforce Doesn't matter if you don't update it. Azure Status page is frequently just a lie. I've had an entire region affected and no status.
English
0
0
2
245
Justin Fagnani
Justin Fagnani@justinfagnani·
🎉 Decorator metadata got consensus for Stage 3 at the TC39 meeting!!! I don't know when TypeScript will ship it, but when it does we'll get to work on support in Lit. 🔥
English
2
5
61
6.3K
Chad Killingsworth
Chad Killingsworth@chadhikes·
@cramforce I 100% agree. The one-sided crusade to destroy them directly affects multiple integrations that used them only for positive outcomes (AKA not tracking). I just want auth to work in my iframes ...
English
0
0
1
0
Malte Ubl
Malte Ubl@cramforce·
Unpopular opinion: Third-party cookies are amazing, probably the best web feature. I just want to only grant them to like 5 websites ever.
English
6
2
50
0
Chad Killingsworth
Chad Killingsworth@chadhikes·
Did you know that import maps can be used to solve the waterfall problem and improve caching for your PWA? Our apps are now shipping import maps to production to address this. banno.com/articles/impro…
English
0
1
4
0
Chad Killingsworth
Chad Killingsworth@chadhikes·
After working on a large ES module project that runs 100% in a modern browser without a build first, switching to anything that requires a build step for development makes me groan.
English
0
0
5
0
Rob Dodson 🦋
Rob Dodson 🦋@rob_dodson·
@slightlylate And we're not very dogmatic about it. Sometimes we have a funky data object that gets passed around in a lot of places (like Eleventy's CollectionItem) and it's nice to have types for that. But we otherwise keep it pretty simple.
English
1
0
2
0
Chad Killingsworth
Chad Killingsworth@chadhikes·
Looking forward to the future spec changes which will make the user experience so much better.
English
0
0
0
0
Chad Killingsworth
Chad Killingsworth@chadhikes·
#WebAuthN for primary factor logins was an incredibly challenging project. We spent a lot more time talking about the use cases than actually implementing it. You can read more about what makes it difficult at banno.com/articles/biome…
English
1
1
1
0
Chad Killingsworth
Chad Killingsworth@chadhikes·
Over 4 million bank and credit union customers on the @BannoJHA platform can now login to their online banking site using biometrics thanks to #WebAuthN. Can your bank do that?
English
1
2
5
0
Chad Killingsworth
Chad Killingsworth@chadhikes·
@MykeBates @dbkahn Without the protection of the HTTPOnly flag on cookies and without a content security policy any such auth token is very susceptible to theft.
English
0
0
2
0
Chad Killingsworth
Chad Killingsworth@chadhikes·
With the upcoming end of 3rd party cookies I am seeing a rise in cookieless auth solutions particularly for framed content. These same apps rarely have content security policy. I forsee this going very badly.
English
1
0
6
0
sam "zero​width​space" thor
@cramforce This feels the wrong way around. Why not just base64 the font in the first load and, on second loads, serve HTML that loads the font as the now-cached woff2 (because you precached the woff2 in a SW)?
English
1
0
0
0
Malte Ubl
Malte Ubl@cramforce·
I think the current best way to load web fonts is: - Not include them at all by default - Install a navigation-preload ServiceWorker - Have that SW inject the font CSS with the fonts as data-URIs if it has the fonts cached. Sigh.
English
9
6
64
0
Chad Killingsworth
Chad Killingsworth@chadhikes·
@cramforce @tokumin Prompting in app to update helps along with the ability to force an update. For security reasons our apps allow forced updates but we try to avoid using that feature.
English
0
0
0
0
Malte Ubl
Malte Ubl@cramforce·
@tokumin I think I am weeping because of the same stats. Or rather the invert: XX%+ traffic by making feature backwards compatible. So more like a weeping smile
English
2
0
0
0
Malte Ubl
Malte Ubl@cramforce·
Update velocity for native apps is absolutely atrocious in a way I didn't expect. In some regions a large percentage of users never update until they get a new phone. Really shows how a US bias can lead to wrong decisions.
English
4
2
14
0
Chad Killingsworth
Chad Killingsworth@chadhikes·
@jakedolan Google Assistant acts as the OAuth client and calls a 3rd party OAuth server. It has very very few options. It's the Google client that doesn't support PKCE.
English
0
0
0
0
Chad Killingsworth
Chad Killingsworth@chadhikes·
Playing around with account linking and Google Assistant actions. Why on earth is PKCE for OAuth2 not supported? The draft OAuth 2.1 spec requires it.
English
0
0
0
0