4 ms·
Why do HTTPS pages get a pass? Between CDNs and ad networks, there's a ton of code out there. At some point, we decided that a magical protective box could make
by freeone3000 9y ago
Why do HTTPS pages get a pass? Between CDNs and ad networks, there's a ton of code out there. At some point, we decided that a magical protective box could make it okay for random people on the internet to run code on our machines. We keep finding this premise to be flawed, with Applets, and with Flash, and now with Javascript, and we always say "oh, if only we had a better protective box, it would have prevented this specific form of attack". Maybe the premise is flawed. Maybe no box is strong enough. Maybe we should stop running code from websites.
- mr_toad 9y ago> Maybe we should stop running code from websites. Which would mean that even something as simple as an up-vote on a comment would require a full page refresh from the server. The lag would probably kill most social media. You could be on to something there.
- dmichulke 9y ago> as simple as an up-vote on a comment would require a full page refresh There are certainly ways to solve this declaratively.
- ateesdalejr 9y agoOne of them being making all form submits asynchronous and not reload the entire page. Or the server sends only the bytes that it changes back.