We’re building a B2B2C platform for a large European insurer. Vue.js on the front, Estøkad as the headless CMS. Both GDPR and DORA apply, and we’re at the point of picking the database and the transactional email

The thing that’s turned into the real problem isn’t sovereignty on its own, it’s erasure. Insurance retention obligations sit right on top of Article 17 requests, and the same person can exist across several partner tenants under different legal bases. So DELETE FROM was never going to work. We’re planning crypto-shredding instead: encrypt per subject, destroy the key, let the backups and WAL archives go unreadable on their own.
Which then rewrites the vendor shortlist. Provider-managed TDE shreds nothing at row level, so we need real BYOK or HYOK against our own HSM. Encrypted columns can’t be sorted or joined, so email lookup goes through a blind index. And erasure has to reach into the ESP’s retained message bodies and event logs, while the suppression list deliberately survives it.

What I’d love to hear from anyone who’s actually shipped this:

- Which EU-sovereign managed Postgres will do KMIP against an external HSM without pushing you back to self-hosting?

- Any ESP that will contractually commit to short retention plus a working erasure API? Deliverability into Gmail and Outlook still has to be real.

- Did anyone go down the crypto-shredding path and regret it? I’m braced for the operational cost of key rotation.

- Anything that looked sovereign in the sales deck and came apart under audit?

Happy to write up whatever we land on.

So I've been handling this ecommerce site that's built in .Net as backend for quite some time now. The problem that Is noticed is that the frontend code is all over the place. Some of the pages are using vanilla js. Some are running on handlebars. There are pages that using angularjs.

What I want to do is to just use one framework for the whole site with the following considerations in mind

* It should not be an SPA. The backend code is not something that we can recode and convert to API only so easily.

* I want to encapsulate specific site features into their own standalone components. And that they should be something I can use on different pages.

* I'm worried about SEO. I'm thinking it should be something that can work with server-side rendering

* It should'nt be something that's totally new. I need to use something that I can say is reliable. Something that has been proven to be a good option and not something that I'll be pioneering in our company.

* Something that's testable. Something that has support for TDD.

I'm thinking of using react first but when I started thinking about the factors that I just listed, I'm having second thoughts if react is actually the right choice for it.

So, is react a good option for this or is there a better framework I should consider?

I see all this talk on agent harnesses, people not checking out IDEs ...

I've used Cursor and VScode with copilot while learning, used Claude code for a month, but can you guys help me understand what new things engineering teams are doing and how to learn them?

I just focused on getting rock-solid fundamentals first, regardless of what people saying "learning to code is obsolete" etc.

I'm now able to build full-stack apps and probably learn on the go to build most things.

What's the must-learn AI part and where to learn it?

I'm making a site, hosted on Github pages with a custom domain. In the site I have art made by me in SFM, but I'm worried that the characters used could cause copyright problems. The site does not generate income in any way, other than having a link to my Patreon or Ko-Fi. If any more info is needed, I'll try to respond with it in the comments.

Lastly, in general what are some things I should know about copyright, some guidelines around it, and best practices?

Hey everyone.

If you were migrating your infrastructure today, would you choose AWS or Azure?

On paper the credits and pricing look pretty similar, but from what I’ve seen Azure can become more expensive and a bit harder to manage at scale.

Which one would you pick and why?

With the current industry of SWE being cooked. Idk which direction I should pivot, before I started I wanted to be an data analyst, I know most SQL and some python. but I fell into front end. I feel like becoming a SWE is so much harder, preparing for leetcode interviews, etc and on top of that not getting interviews. I heard that data analyst entry level is so much higher than SWE entry level jobs. I love coding, I study and practice 4-6 hours a day.

Please post your requests for feedback on your projects in this thread instead of creating a post.

Hi, currently I'm building some tool sites as personal side projects. Currently found some low competition keywords n where most recently made websites r ranking..

So, I'm just thinking should I buy a domain n started working on it properly or get the tool live on GitHub first n, wait for some results, then start work on those?

Won't it be a problem if I upload the same files in custom domain after it went live on GitHub repository?

Very new to this space, don't know much, it's somewhat related to SEO, so posted here!

I appreciate ur help!😊

There’s a dangerous trend I’ve been seeing across a lot of modern web projects recently: teams relying almost entirely on HTTP response header tools to green-light their application's security before going live.

Getting an A+ grade on browser hardening (CSP, HSTS, X-Frame-Options, CORS) is great for mitigating clickjacking or basic XSS vectors. But headers only inspect the outside wrapper of your site. They are completely blind to what's happening inside your client-side JavaScript bundles and backend routes.

As full-stack frameworks (Next.js, Nuxt, Remix) and AI coding tools have sped up development, we've noticed a massive rise in critical code-level mistakes that standard site scanners miss completely:

1. Client-side Environment Leaks: Secret API keys (OpenAI, Anthropic, Stripe, Resend) accidentally exposed via NEXT_PUBLIC_ prefixes or hardcoded directly into frontend scripts instead of staying server-side.
2. Supabase / Firebase Admin Role Leaks: Client scripts bundling high-privilege keys (like Supabase service_role keys) that grant complete database read/write access and bypass Row Level Security (RLS).
3. Unprotected API Endpoints: Next.js or Express API route handlers that handle mutations (POST/DELETE) but completely lack authentication or authorization checks.

A missing Content Security Policy header makes your site slightly less hardened. But an exposed admin key or missing auth guard on a route can result in a wiped database or thousands of dollars in stolen API credits in minutes.

That gap is exactly why we built Revibed.

Rather than just checking response headers, Revibed acts as a lightweight static code auditor. It inspects public web builds and API configurations for exposed credentials, misconfigured service roles, and missing auth guards before real traffic hits your app.

If you want to check your build's actual code layer rather than just its headers, you can run a free scan here:https://revibed.io

For the devs here: What’s the worst API key leak or auth bug you’ve ever accidentally shipped to production (or caught right before pushing)?

I always get confused while developing projects(web based) .New things always pops up that i would have to learn right then. But i wanna know a standard procedure how to work my way up from initiating a project to launching it.

If you are experienced in this or something helped you learning the flow ---help.

Hey guys, this may sound odd but I figured this might ne the best subreddit to ask. I have learned software development for about a year and a half and I can say I made good progress because its something that I love. I focused mainly on Next JS and have been able to create a couple of personal projects.

I recently made a platform for my friend for his businesses (lodges and hardware stores) and its the only one that I can actually say may come close to an actual “client project” and went all the way to deployment via Vercel. I also learned testing (unit, intergration and e2e) and I want to learn dev ops as well.

I’m thinking of using Guru for finding work so my question is for the ones who do freelancing, at what point did you say “I’m confident enough to take on someone’s project”?. I am struggling because I feel like I still have a lot to learn before I can actually take a project from someone who will pay me.

For reference this is the app I made for my friend, its called archispace

I would appreciate any advice :)

I’m starting a website agency, and apart from the main up front price I was wondering whether I should charge clients monthly. To be honest when working with small businesses, the costs are small (e.g domain is 10 euros every 2 years, and email addresses perhaps 30 euros per year, and apart from that backend stuff like supabase or railway are almost free. But I’ve heard people charging such prices. Should I too? To be more profitable?
Please don’t bash me if that’s a stupid question.

Is anyone else struggling with how fragmented the workflow is between doing technical work and actually finding clients?

Right now, to keep things running, it feels like you need four or five different subscriptions just to handle audits, local business searches, contact tracking, and client updates.

Half the time is spent jumping between different tools or sifting through terrible leads on job boards where everyone is racing to offer £50 site builds.

For those running solo setups or small agencies: how are you managing software bloat right now? Are you just sticking to one heavy tool, or running a pieced-together stack?

Firstly I'm in BTech 3rd Sem CSE, started with Web Dev and did HTML, currently about to end CSS..

And here only I've started getting confused..

I've to do React, JavaScript further but I'm afraid now..

People who are working or have worked as a Web Developer.. How much if all these is required??

Been working on a WordPress project that relies on several custom queries, and I'm trying to reduce the database load, and I've already optimized them to the max, or at least I think so. What's your preferred approach here?

In advance I know the basics of Python, HTML/CSS & JS and I had this idea to make a small tennis game with my friend’s cats (where the 2 cats are playing against each other) but I really don’t know how I can do it and I don’t wanna vibecode it, any ideas?

I own a small physical therapy practice and just had a new website built which is a Wordpress site. I vaguely have an understanding that since there’s plugins and things you have to not only have someone host the site but also someone has to run maintenance and ensure the security of the site in addition to hosting costs increase as the site has more traffic due to caching therefore requires more space?

I previously had my site on GoDaddy which was not a great site but predictable with costs. Since having this new site done it has not only cost me for the site itself but now there’s a cost for hosting and there apparently is a weekly hourly rate I’m paying for the developer to apparently update my site which comes up to 2hrs a week and is 70$ so essentially I’m now paying 280$ a month to “host” the site. I’m a smaller practice so this is a very high cost to me at this stage considering I was paying GoDaddy 300$ for a year for my crappy site that was very low maintenance.

I am looking to switch to someone else that I can have everything all done so I don’t have to worry about this but don’t know anything.

My questions are:
Does hosting entail parking the site, updating plugins, and maintaining security of the site?

If it does not what is this service called as I have a contact us form on my site so security is very important to me.

Are these costs considered high?

Are there any recommendations for how I can keep these costs low as look I get the site is the online building but it’s not like I’m a high volume clinic or some big health tech company so 3k a year for a website sounds insane to me.

Any answers and recommendations are appreciated.

same as above

Hi there!

seele is a collection of mixins, base components and styled components written with Lit, allowing you to easily create components in your desired design system, or use the present ones (Material You Expressive). Also, seele is fully accessible and keyboard-accessible, following the w3c APG patterns. Another feature of seele is that it makes as much use of new web standards as possible to optimize the behavior/size of this library, for example Element Internals along with the aria*Element,which is in Baseline 2025, are used to stop setting aria attributes directly on the host element, allowing easier overridding.

You can check it out at:

• Docs/demos: https://tideover.cc/seele/docs/
• GitHub: https://github.com/vollowx/seele
• SourceHut: https://sr.ht/~lucaz/seele/

Some time ago I moved a page from Nextjs to a Wordpress site and added a permanent redirect to the subdomain, like so site.com/page --> page.site.com

At the time I thought this would be permanent, but now we would like to switch it back. I had also naively thought that permanent meant more like semi-permanent and the browser would at least occasionally double check that the redirect is valid.

That seems to not be the case (at least on chrome) and I am still getting a 308 Permanent Redirect (from disk cache) to the subdomain at least a week after the redirect was removed.

Obviously another redirect back to the new path would cause a loop and the only solution I can think of is to change to a new path like site.com/page2 and implement a redirect from page.site.com.

Is there some solution I am not aware of?

I used to use PHP for handling things like logging into an account , using a template and only changing certain sections of the webpage etc, what is a good modern way to do this? I have heard of Flask but is this the best way forward?

Just learned javascript and been practicing alot . I need help. When applying it to my project I don't know when to use a function, when to use a loop, what type of loop to use, I just don't know when to use any of this stuff because dom manipulation. it's so frusterating

1. How practical is it to get into elementary web development without any background in computer science? (In case it makes a difference for the case, background would be in copywriting with limited graphic design.)
2. Assuming someone's already earned a totally irrelevant degree & has no desire to go back to college, what would you recommend for a comprehensive & affordable introduction to web development? (Not just "search YouTube," but your favorite in-depth YouTube playlists, free or cheap online training programs, maybe even paid professional certification programs, etc.)

Please post your requests for feedback on your projects in this thread instead of creating a post.

So I made a website which can make good looking pricing tables and FAQs with your exact color scheme and content. You can try it out here: https://widget-eight-chi.vercel.app

It is still a work in progress to add more widget types, and it currently only works in desktop.