eToThePiIPower

Nah, my Twitter feed is curated by people I actually like but are complete strangers to me, with the odd speaker-I-met-once-at-a-meetup thrown in.

I have to disagree. A phishing scam from "billing.foo.com" would be much harder to spot than one from "user-content.foo.com/billing". Especially if the user has free reign over the style + content.

If the user is going to be able to design + style the pages any way they want, having something in the URL to indicate it's still user content is important.

I also live in a purple district (in a very blue state), and while my Republican Congressman has made it clear he's against Net Neutrality, he voted against the repeal of the Internet privacy regulations, so he can't be counted out entirely.

However, I'm still not all too sure whether Net Neutrality is worth promising support to existing Republicans. There are so many other issues on the table this election cycle and they next Congress is likely to be as, or more, supportive on this.

Yes, good encryption/hashing assumes the algorithm is known, but we're also talking about the giving away the salt. The salt in a secure hash plays an analogous role to the secret key in an encryption cipher; both are assumed unknown by an attacker.