lieuwex

> something which George himself opposed.

Do you have a source on this?

I don't see what JS code would provide this?

This function is user contributed. It's not official.

What kind of risk profile does one have when it is likely that both the password is known and malware has been installed on the phone, but also just access to an ephemeral login session by the attacker (which could be obtained even when using a secure enclave by waiting for the user to authenticate by themselves) would not be enough?

This is the exact same as DigiD, except that there is no cost per-auth, only per-sms. The parent comment is saying that Amsterdam wanted the users to install the DigiD app instead of relying on SMS authentication.

HTTP/3 even more so due to QUIC's shorter handshake process.

For fun I suppose? See: esoteric programming languages

> This addresses one of the longest standing complaints about SQL, and the DuckDB team implemented it in 2 days.

what a weird thing to say.

no

Are you sure? I think the computed tab in Chrome devtools shows the actual used font.