News for hackers. Stuff that matters.

A comment on Where Am I? NYTimes or Google?. Parent comment

Re:Where Am I? NYTimes or Google? by gregable on Saturday July 04, 2020 @12:21AM (#23730095)
There is a publisher selected expiration date as part of the signed exchange which the client inspects. The expiration also cannot be set to more than 7 days in the future on creation. This minimizes, but of course does not eliminate, this risk.
[ Parent | on HN ]
Re:Where Am I? NYTimes or Google? by xg15 on Saturday July 04, 2020 @06:22AM (#23731372)
It also makes signed exchanges completely unusable for delivering packages offline. (E.g. the USB stick scenario)

What a bummer.

[ Parent | on HN ]
Re:Where Am I? NYTimes or Google? by smichel17 on Saturday July 04, 2020 @08:24AM (#23731792)
Browsers could have a setting to optionally display the content anyway, along with a warning to the effect of "site X is trying to show an archive of site Y", similar to how we currently handle expired or self-signed SSL certificates.
[ Parent | on HN ]