Re:Google clears up AMP’s confusing URLs by hiding google.com
by josteink on Sunday June 23, 2019 @03:50PM
(#20258256)
> Now with this signed exchange tech, the contract is between browser and origin server. The Google cache is now super dumb, which is a big improvement from a privacy and security perspective.
Transparently serving content from google when the url says something else is a complete loss of privacy and security from a user-perspective.
Re:Google clears up AMP’s confusing URLs by hiding google.com
by lawrenceyan on Sunday June 23, 2019 @09:24PM
(#20259855)
Only if the user doesn't understand how cryptographic signing and verification works. Otherwise, they'll know that doing things this ways actually creates stronger guarantees of privacy than what previously was done.
Re:Google clears up AMP’s confusing URLs by hiding google.com
by josteink on Monday June 24, 2019 @03:28AM
(#20261280)
But now Google gets to track my requests where they previously couldn’t, because my request goes to their server.
That’s a massive loss of privacy right there. How is that even debatable?
Also given how Google works, I think it’s reasonable to assume that enabling this additional Google-tracking was the primary intention behind AMP.
Re:Google clears up AMP’s confusing URLs by hiding google.com
by lawrenceyan on Monday June 24, 2019 @04:22PM
(#20268030)
Once they've been encrypted, it's all just gibberish to the intermediaries. If you truly do see this as a massive loss of privacy, then why are you not outraged at Comcast and others that regularly act as middlemen with your encrypted data today?
Re:Google clears up AMP’s confusing URLs by hiding google.com
by josteink on Monday June 24, 2019 @05:18PM
(#20268601)
They see the URL I’m requesting. It’s trivial for them to request that same content.
My isp cannot do that because the url is part of an encrypted transfer, but a transfer google now has allowed themselves to snoop into.
This is why Google is analogous to Comcast here. Neither can mess with the content or impact its origin. They are just part of the packet transmission system in between.
Hence this is a huge win. Previously, AMP was served off of Google servers where Google was the man in the middle aware of and even able to manipulate the content. The scripts were running on their origin, etc.
Now with this signed exchange tech, the contract is between browser and origin server. The Google cache is now super dumb, which is a big improvement from a privacy and security perspective.