https://ergophobia.org/tags/contact-form/Recent content in Contact-Form on ErgophobiaHugoenSun, 30 Aug 2026 00:00:00 -0400https://ergophobia.org/updates/2026-08-30-ergophobia/Sun, 30 Aug 2026 00:00:00 -0400https://ergophobia.org/updates/2026-08-30-ergophobia/<p>The contact form got most of the attention. A hardening pass first: the honeypot field is hidden from screen readers so nobody using assistive tech fills it in by accident, the rate limiter&rsquo;s memory is bounded and sweeps idle entries, and two bypasses are closed. It trusted whatever the client put in the forwarded-for header, and the Bun process listened on every interface instead of loopback. Then the bigger change: the form takes several attachments in one submit, and the handler encrypts message and files to my published PGP key before handing them to sendmail. What lands in the spool on the VPS is ciphertext. The public key is on the contact page and at /jim.asc.</p>