Skip to main content

Chrome DBSC: shift from bearer cookies to device-bound session credentials

· 13 min read
Pranjal Kumar
Software Engineer, @Bentley Systems

Chrome Device Bound Session Credentials architecture Most authentication systems are built around a comforting illusion: once a user successfully logs in, the system believes it knows who is on the other side of the connection.

In reality, most web applications do not continuously know who is using the session. They know only that each request carries a valid cookie.

That distinction is not academic. It is the reason session theft remains one of the most effective ways to bypass passwords, MFA, passkeys, risk checks, and even carefully designed identity-provider flows.

AWS S3: how cheap discs became durable storage at scale

· 15 min read
Pranjal Kumar
Software Engineer, @Bentley Systems

AWS S3 internal working explained | Pranjal Kumar When people first hear about Amazon S3, they usually think of it as “cloud file storage.”

That description is convenient, but architecturally misleading.

S3 is not a giant hard drive in the sky. It is not a shared folder. It is not a filesystem with infinite space. And it is almost certainly not just a pile of premium SSDs waiting to serve your objects.

A better mental model is this:

S3 is a massive distributed object storage system that converts unreliable commodity hardware into durable, highly available, high-throughput storage through software, redundancy, metadata systems, erasure coding, checksums, repair loops, and extreme parallelism.

Caching vs content delivery networks: What's the difference?

· 9 min read
Pranjal Kumar
Software Engineer, @Bentley Systems

Caching vs CDN comparison

In the world of network optimization, Content Delivery Networks (CDNs) and caching play a vital role in improving website performance and user experience. And while both aim to speed up website loading times, they have distinct purposes and mechanisms. In this tutorial, we'll dive deep into the details of CDNs and caching to understand their similarities, differences, and how they contribute to enhancing online experiences.

The past and present of browser architecture

· 17 min read
Pranjal Kumar
Software Engineer, @Bentley Systems

Multi-process browser architecture diagram

The front end may be a rapidly changing field, and it is difficult for us to understand all aspects of it. However, front-end systems generally run in browsers, so a better understanding of browsers can help us develop front-end applications more effectively. This is also one of the reasons for this article and serves as an instance analysis of runtime.