The problem with most encryption strategies nowadays is that they require third-party software and/or services, require maintenance of additional keys and/or secrets, and provide an awful user experience.

Decoupled Drupal has long been an approach touted by some in the front-end contingent of the Drupal community to achieve goals such as a better user experience, a more modern front-end developer experience, and clearer separation of concerns.

Update November 18: Documented longer list of dangerous file extensions Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or e... (more…)

Moshe Weitzman, Senior Architect and Project Lead, gave a talk at DrupalCon Global 2020 to introduce Drupal Test Traits -- a new open source project started by the Commonwealth of Massachusetts. Drupal Test Traits (DTT) are designed for use with Drupal w... (more…)

As of late, I’ve been discussing the fact that my employer/organization is moving away from Drupal. I now face the decision "To Drupal or not to Drupal." I have decided to discuss (more…)