Just discovered the Web Security docs on MDN - the holy grail for all my web sec queries! https://openwebdocs.org/content/posts/security-docs-sovereign-tech-agency/