News for hackers. Stuff that matters.
Re:Google no longer providing original URL in AMP for image ... by gregable on Thursday May 28, 2020 @06:43PM (#23343846)
All this means is that any server can choose to present any bytes, even with TLS, as a response to any request. This isn't a novel observation.

If a signed exchange includes a URL, that URL must be signed for the browser to respect the field.

Re:Google no longer providing original URL in AMP for image ... by freeone3000 on Thursday May 28, 2020 @09:05PM (#23345160)
Right, but this means proposing signed exchanges as a solution to AMP's strategies is kind of nonsense, since it's a semantic problem whether a page is acting as a proxy for another, and a technological solution doesn't work here.