News for hackers. Stuff that matters.
Re:Gemini is a little gem by spc476 on Wednesday January 26, 2022 @02:51PM (#30090754)
But gopher doesn't have TLS. Yes, there are clients that attempt to make TLS connections to gopher servers and will fall back to plain TCP on failure, but that's a hack (and a pretty annoying one at that).
Re:Gemini is a little gem by owroomexorcist on Wednesday January 26, 2022 @03:05PM (#30090951)
What's wrong with not having TLS? If it's just for hobbiests to share text documents, why include a TLS layer?
Re:Gemini is a little gem by capableweb on Wednesday January 26, 2022 @03:07PM (#30090970)
Suddenly you can't trust anything you're being served as there are so many endpoints you could be MITM'd at. Reading a text about some experience someone had? Snippets from that text could have been replaced if you are not using any cryptographic protocol what so ever.
Re:Gemini is a little gem by owroomexorcist on Wednesday January 26, 2022 @03:10PM (#30091009)
Fair point. But if we're talking about a protocol not meant for the mainstream, is it really an attack vector to worry about?
Re:Gemini is a little gem by spc476 on Wednesday January 26, 2022 @04:23PM (#30092096)
For some, yes.