Re:Every Google result now looks like an ad
by joshuamorton on Tuesday January 21, 2020 @11:54PM
(#22114751)
I updated the prior post, but to be a bit more concrete, what differentiates AMP signed exchanges from, say, HTTPS?
[ Parent
| on HN ]
Re:Every Google result now looks like an ad
by jhasse on Wednesday January 22, 2020 @05:30PM
(#22122771)
Google could serve an older version without the user knowing.
Re:Every Google result now looks like an ad
by joshuamorton on Wednesday January 22, 2020 @06:11PM
(#22123083)
The signed exchanges protocol requires that the content be signed with a key with a short expiry date (< 1 week), sites are free to make it shorter. In extreme cases, the providing site could sign with an expiry of < 1 day or even something like 1 hour.
And iiuc, sites are still free to revoke their certs. So this is actually probably more secure compared to something like https in that regard.
[0]: https://github.com/WICG/webpackage/blob/6cc3237b36c2f9ce7534...