News for hackers. Stuff that matters.
Re:Web0 Manifesto by superkuh on Saturday January 06, 2024 @04:22PM (#38895616)
web 1.0 was extremely decentralized. And now that everyone has fast connections everyone can easily host web 1.0 sites by installing nginx and putting html and files in directories and forwarding port 80 from their router. It's extremely low risk, no maintaince, low resource usage, and completely distributed. And it's okay if you shut down your computer and the webserver for days or weeks. Being up all the time is only a commercial requirement.

I think a real 'web0' like they're talking would be re-implementing Opera's good idea of integrating a working webserver that started up when you started your browser. Opera operated as a proxy for those hosted websites but that need not be the case.

Re:Web0 Manifesto by clwg on Saturday January 06, 2024 @04:41PM (#38895793)
I like it, but I'd probably put that on 443 with TLS. The threat model and attacks developed since web 1.0 have increased in complexity and sophistication and better to be safe than sorry.
Re:Web0 Manifesto by superkuh on Saturday January 06, 2024 @04:45PM (#38895829)
As an option that's fine but it brings in a big dependency stack and lots of moving parts. acme2 might not look like it from the user end but internally there's a lot that's going on those acme programs are hiding. HTTP+HTTPS assures a site doesn't die just because of a cert renewal or CA problem (like LE's root cert expiring a couple years back, the switch from acme 1 to acme 2, your particular acme client having a dep that breaks on update, etc).

While commercial and institutional sites do have to operate with a different security model these days, human people not involved in monetary exchange or private information have the same requirements as ever. HTTPS is optional. A nice add-on but not vital. And definitely not HTTPS only if you want your site to last more than a few years without active manual mantainance.

Re:Web0 Manifesto by clwg on Saturday January 06, 2024 @04:51PM (#38895882)
You could also self sign - It's going to be grating for users, but your still afforded the protections against any hop on the path.