3 ms·

The fact that it's being served out of Google's servers changes the trust model for the content. End users have no good reason to trust Google with the cached d

by pcl 10y ago

The fact that it's being served out of Google's servers changes the trust model for the content. End users have no good reason to trust Google with the cached data, but people assign trust to them when they click an AMP link. There's no real indication to an end user that that data is coming out of Google's caches rather than from the content provider. I find that misleading. Typically, cached web pages come out of edge caches, either maintained by a CDN selected by the content provider, an end-user's ISP, or by a box on the local network. In this case, Google -- the search engine -- is fundamentally changing the nature of how the user obtains the third-party search result content. IMO this is very different than my company or ISP doing some edge caching. It's different because it is much more of an opt-in sort of relationship, and, more importantly, because it's decentralized -- if Comcast starts to muck with search result content, Verizon users will notice the discrepancy. If Google takes advantage of their monopoly position and alters AMP content, nobody except the content providers will be the wiser.

fixermark 10y ago
> End users have no good reason to trust Google with the cached data I'd imagine that end users who don't trust Google aren't using Google. > There's no real indication to an end user that that data is coming out of Google's caches rather than from the content provider. Users who care can see the URL and the domain for which the cert is signed. Most users do not care. > IMO this is very different than my company or ISP doing some edge caching. It's different because it is much more of an opt-in sort of relationship... I don't see why I can't substitute "Google" and "Bing" for "Comcast" and "Verizon" in your example. For that matter, at least in the U.S., it's a lot easier to switch out my search engine than my ISP if Comcast starts to muck with result content. FWIW, Verizon already redirects failures of domain name resolution to itself. I don't like it, and there's not much I can do about it if I want Internet around here. > If Google takes advantage of their monopoly position and alters AMP content, nobody except the content providers will be the wiser. That's a fair concern, but the day Google does that is the day a media firestorm blows AMP out of the water as a trustworthy tool.
- IanCal 10y ago
  > That's a fair concern, but the day Google does that is the day a media firestorm blows AMP out of the water as a trustworthy tool. And in particular, it looks (at a quick check) like the google hosted files are in a very predictable location, so it should be easy to write something to check both that version and the hosted version against each other to monitor for discrepancies.
- mamadrood 10y ago
  > I'd imagine that end users who don't trust Google aren't using Google. Except Google use to just guide your to the content, you just had to trust them to give you the best possible answer. Now you have to trust they have the real one too. > Users who care can see the URL and the domain for which the cert is signed. Most users do not care. Most users do not care if their passwords are stored in plain text, or if a bridge they cross has been built by a proper engineer. Consumer ignorance is not a valid reason for shady practices.

by pcl 10y ago

fixermark 10y ago

> End users have no good reason to trust Google with the cached data I'd imagine that end users who don't trust Google aren't using Google. > There's no real indication to an end user that that data is coming out of Google's caches rather than from the content provider. Users who care can see the URL and the domain for which the cert is signed. Most users do not care. > IMO this is very different than my company or ISP doing some edge caching. It's different because it is much more of an opt-in sort of relationship... I don't see why I can't substitute "Google" and "Bing" for "Comcast" and "Verizon" in your example. For that matter, at least in the U.S., it's a lot easier to switch out my search engine than my ISP if Comcast starts to muck with result content. FWIW, Verizon already redirects failures of domain name resolution to itself. I don't like it, and there's not much I can do about it if I want Internet around here. > If Google takes advantage of their monopoly position and alters AMP content, nobody except the content providers will be the wiser. That's a fair concern, but the day Google does that is the day a media firestorm blows AMP out of the water as a trustworthy tool.

IanCal 10y ago
> That's a fair concern, but the day Google does that is the day a media firestorm blows AMP out of the water as a trustworthy tool. And in particular, it looks (at a quick check) like the google hosted files are in a very predictable location, so it should be easy to write something to check both that version and the hosted version against each other to monitor for discrepancies.
mamadrood 10y ago
> I'd imagine that end users who don't trust Google aren't using Google. Except Google use to just guide your to the content, you just had to trust them to give you the best possible answer. Now you have to trust they have the real one too. > Users who care can see the URL and the domain for which the cert is signed. Most users do not care. Most users do not care if their passwords are stored in plain text, or if a bridge they cross has been built by a proper engineer. Consumer ignorance is not a valid reason for shady practices.