News for hackers. Stuff that matters.

A comment on Where Am I? NYTimes or Google?. Parent comment

Re:Where Am I? NYTimes or Google? by simias on Saturday July 04, 2020 @11:44AM (#23733028)
I agree with you, if I understand the signed exchange proposal correctly the trust model is effectively similar (NYT explicitly opts to let Fastly pretend to be them through their DNS config in the same way that a signed exchange would let them explicitly opt into letting Google pretend to be them).

I'm still opposed to the change, I see this centralization of the web through CDNs as a bad thing, I don't want to make it easier.

[ Parent | on HN ]
Re:Where Am I? NYTimes or Google? by jefftk on Saturday July 04, 2020 @12:50PM (#23733443)
The trust model is pretty different: in the traditional model NYT has to trust their CDN to serve the content unmodified. In the signed exchange model, any modification will cause the content not to validate, and the browser will reject it.
[ Parent | on HN ]