News for hackers. Stuff that matters.
Re:Google and HTTP by geonnave on Tuesday July 04, 2023 @12:11PM (#36588592)
The way the author begins the article makes you think Google is trying to s/HTTP/$NEW_PROPRIETARY_PROTOCOL/, although they just mean s/HTTP/HTTPS/.
Re:Google and HTTP by forgotmypw17 on Tuesday July 04, 2023 @12:18PM (#36588705)
HTTPS may not be proprietary, but it comes with many of the same drawbacks: central control, lack of transparency, more difficult to debug, and less accessible in many circumstances.
Re:Google and HTTP by SahAssar on Tuesday July 04, 2023 @06:47PM (#36593482)
> central control

What central control? Your browser uses a trust store and there are multiple independent (but collaborating) groups that decide what CA:s to trust.

The rest of your supposed drawbacks seem like they would be the same in any system with encryption, right?

Re:Google and HTTP by forgotmypw17 on Wednesday July 05, 2023 @04:02AM (#36597194)
You rely on one of several central authorities to grant a user access to your website (or be faced with a scary message about your site being insecure).

Just because you can choose from one of several central authorities doesn't change the fact that you are reliant on them to authorize the user's ability to establish a network connection with you.

Re:Google and HTTP by SahAssar on Wednesday July 05, 2023 @04:14AM (#36597301)
That means it is more like federated control IMO.
Re:Google and HTTP by forgotmypw17 on Wednesday July 05, 2023 @04:45AM (#36597574)
Whatever you want to call it, it creates extra complexity, failure modes, and barriers to information access.
Re:Google and HTTP by xg15 on Tuesday July 04, 2023 @04:19PM (#36592019)
True, Google's attempts at pushing SPDY and QUIC came later...
Re:Google and HTTP by SahAssar on Tuesday July 04, 2023 @06:43PM (#36593442)
Those are not proprietary and have multiple independent implementations and are supported by all major servers and clients.