Re:Google and HTTP
by geonnave on Tuesday July 04, 2023 @12:11PM
(#36588592)
The way the author begins the article makes you think Google is trying to s/HTTP/$NEW_PROPRIETARY_PROTOCOL/, although they just mean s/HTTP/HTTPS/.
[ Parent
| on HN ]
Re:Google and HTTP
by forgotmypw17 on Tuesday July 04, 2023 @12:18PM
(#36588705)
HTTPS may not be proprietary, but it comes with many of the same drawbacks: central control, lack of transparency, more difficult to debug, and less accessible in many circumstances.
> central control
What central control? Your browser uses a trust store and there are multiple independent (but collaborating) groups that decide what CA:s to trust.
The rest of your supposed drawbacks seem like they would be the same in any system with encryption, right?
Re:Google and HTTP
by forgotmypw17 on Wednesday July 05, 2023 @04:02AM
(#36597194)
You rely on one of several central authorities to grant a user access to your website (or be faced with a scary message about your site being insecure).
Just because you can choose from one of several central authorities doesn't change the fact that you are reliant on them to authorize the user's ability to establish a network connection with you.
That means it is more like federated control IMO.
Re:Google and HTTP
by forgotmypw17 on Wednesday July 05, 2023 @04:45AM
(#36597574)
Whatever you want to call it, it creates extra complexity, failure modes, and barriers to information access.
True, Google's attempts at pushing SPDY and QUIC came later...