3 ms·

Too much complexity. I find it interesting how everything has to be encrypted and 'secure' now. The excuse is always the NSA, but let's be honest: A new transp

Too much complexity. I find it interesting how everything has to be encrypted and 'secure' now. The excuse is always the NSA, but let's be honest: A new transport protocol isn't going to protect you from them. I think there's a lot more to the cellular baseband and Intel ME backdoors than anyone can imagine. Google is going to do the same thing with this they did with HTTPS. Soon enough, you'll be penalized through search and/or Chrome for not supporting it.

dtech 8y ago
The incentive for Google is that all browsers support QUIC, it saves them a lot of hardware costs and increases performance. They couldn't care less if your website uses QUIC. You're receiving downvotes because you're propagating the "pushing encryption is motivated by Google's evil agenda" that's currently in vogue with a subsection of HN commenters, for reasons unknown to me because quite frankly the arguments are ridiculous.
- myhf 8y ago
  > all browsers support QUIC Try blocking your network's access to www.google-analytics.com (with a fast-loading block notice page) and you will see that most webpages become unusable with a 30-second delay before page load completes. If QUIC only works when the network has no partitions, then QUIC doesn't work.
  - icebraining 8y ago
    I block Google Analytics and experience no such delay.
  - pjc50 8y ago
    I have google-analytics.com blocked in the hosts file on several machines and it usually speeds things up. > If QUIC only works when the network has no partitions Eh? Why do you think that?
viraptor 8y ago
> The excuse is always the NSA This generalisation is pretty bad. The excuse was Firesheep (https://en.m.wikipedia.org/wiki/Firesheep https://en.m.wikipedia.org/wiki/Firesheep) in 2010. Another one was ISPs injecting ads and malware into pages (https://thehackernews.com/2016/02/china-hacker-malware.html https://thehackernews.com/2016/02/china-hacker-malware.html). Another one is BGP hijack of public DNS (https://news.ycombinator.com/item?id=17178905 https://news.ycombinator.com/item?id=17178905) Even with NSA, encryption pretty much kills passive data collection, as long as the other end is not compromised. Sure, it won't help you if you're targeted. But that's not a good reason to drop encrypt-everything efforts.

dtech 8y ago

The incentive for Google is that all browsers support QUIC, it saves them a lot of hardware costs and increases performance. They couldn't care less if your website uses QUIC. You're receiving downvotes because you're propagating the "pushing encryption is motivated by Google's evil agenda" that's currently in vogue with a subsection of HN commenters, for reasons unknown to me because quite frankly the arguments are ridiculous.

myhf 8y ago
> all browsers support QUIC Try blocking your network's access to www.google-analytics.com (with a fast-loading block notice page) and you will see that most webpages become unusable with a 30-second delay before page load completes. If QUIC only works when the network has no partitions, then QUIC doesn't work.
- icebraining 8y ago
  I block Google Analytics and experience no such delay.
- pjc50 8y ago
  I have google-analytics.com blocked in the hosts file on several machines and it usually speeds things up. > If QUIC only works when the network has no partitions Eh? Why do you think that?

viraptor 8y ago

> The excuse is always the NSA This generalisation is pretty bad. The excuse was Firesheep (https://en.m.wikipedia.org/wiki/Firesheep https://en.m.wikipedia.org/wiki/Firesheep) in 2010. Another one was ISPs injecting ads and malware into pages (https://thehackernews.com/2016/02/china-hacker-malware.html https://thehackernews.com/2016/02/china-hacker-malware.html). Another one is BGP hijack of public DNS (https://news.ycombinator.com/item?id=17178905 https://news.ycombinator.com/item?id=17178905) Even with NSA, encryption pretty much kills passive data collection, as long as the other end is not compromised. Sure, it won't help you if you're targeted. But that's not a good reason to drop encrypt-everything efforts.