Ask HN: What is on your personal checklist for webapp architecture?

When you are writing a web app (or API, or backend for a native app, or other project in the category), what to you make sure to consider for performance, reliability, and security? Here are a few of mine: Performance: * Cache where appropriate * Use pagination * Minify scripts, use small images where possible Reliability: * make actions idempotent unless I have a reason not to * write a comprehensive test plan & test suite * build an easy deployment pipeline Security * Use the standard modules and best practices provided by the framework * enforce connection by https for all pages * make sure sign in/up/out and recovery options are reasonable.