4 ms·
Browsers need to take a hardline stance on external content and stop allowing pages to load anything whatsoever from external domains. But they won't, becuase o
by Sir_Cmpwn 9y ago
Browsers need to take a hardline stance on external content and stop allowing pages to load anything whatsoever from external domains. But they won't, becuase one of them is Google.
- beart 9y agoWouldn't this just lead to these websites putting everything behind a reverse proxy? That would make it harder to detect and block third party scripts.
- pc86 9y agoSo in addition to explaining to your parents what an SSL cert is you want to explain to them which domains should be whitelisted and which shouldn't?
- Sir_Cmpwn 9y agoWhat does this have to do with my comment?
- deadmetheny 9y agoYeah that's exactly what we need, browsers arbitrarily deciding what content is allowed to be loaded.
- Sir_Cmpwn 9y agoIt would not be arbitrary, it would be well defined.
- jstarfish 9y agoI agree with your sentiment but this would break every website that uses a CDN for static assets.
- Sir_Cmpwn 9y agoIt would, that's the point. You'd give them time to fix it, like you give notice before visually indicating HTTP is insecure or deprecating SHA-1 certificates.