Changelog

July 26, 2026

Removed BufferDash analytics and updated the privacy documentation to reflect that buffer.lol does not run product analytics or third-party tracking.
Aligned IP Lens documentation with its onboarding request timing, contextual PTR and RDAP actions, and public terms page.

Added documentation for IP Lens, the coming-soon native iPhone toolkit for public IP lookup, DNS-over-HTTPS, authoritative RDAP registration, offline subnet calculation, and bounded batch analysis.
Documented IP Lens workflows, local storage, export behavior, third-party request destinations, and its separation from the buffer.lol diagnostics API.

Added DNS Resolver Comparison for normalized A, AAAA, CNAME, MX, NS, TXT, and CAA answers from Cloudflare, Google, Quad9, and OpenDNS.
Added Email DNS Health checks for MX, SPF, DMARC, optional DKIM selectors, MTA-STS, and SMTP TLS reporting.
Added HTTP Security Headers inspection with safely validated redirects, headers-only requests, individual findings, and recommendations instead of a letter grade.
Added the keyboard-accessible tool launcher, recent-tool quick access, related-tool navigation, and safe public-target handoffs between diagnostic workflows.

Renamed Ping Tester to Browser Latency Test and Packet Loss Tester to Connection Stability Test so the names match their browser-based HTTPS measurements.
Renamed IP Geolocation to IP Network Lookup to match the RDAP country, network, and ASN data returned.
Enabled authenticated worker-backed traceroute while keeping latency and stability sampling in the browser.
Added structured diagnostic results, output copy actions, clearer failure details, a branded 404 page, and accessibility improvements.
Added private BufferDash analytics with HTTPS-only production loading, site-origin enforcement, anonymized-IP support, and privacy-safe tool usage events that exclude submitted targets and local tool inputs.
Hardened outbound requests against DNS rebinding, enforced streamed request-body limits, expanded reserved-IP filtering, bounded in-memory caches, and made reverse-proxy trust explicit.
Added generated robots.txt and sitemap.xml routes, canonical tool metadata, and response security headers.
Added automated tests and CI validation before VPS deployment, updated Next.js, and moved the production image to a smaller non-root standalone runtime.

Rebuilt buffer.lol as a public diagnostics toolbox for network, IP, web, and developer checks.
Added browser-local utilities for JSON, Base64, hashing, UUIDs, timestamps, URL parsing, JWT decoding, regex testing, CIDR math, and user-agent inspection.
Added same-origin diagnostics API requests at POST /api/tools/[slug].
Added server-backed checks for DNS records, HTTP headers, TLS certificates, uptime, TCP ports, public IP, IP geolocation/network data, ASN data, RDAP lookups, redirects, and robots/sitemap discovery.
Marked ping, packet-loss, and traceroute as worker-required tools until ICMP and traceroute support can run in a container or VM worker.