5 ms·
CORS is a technical subsidy granted to (sloppy) users of cookie authentication. I’ve never worked on a project where it was anything other than an annoying hoop
by guscost 8y ago
CORS is a technical subsidy granted to (sloppy) users of cookie authentication. I’ve never worked on a project where it was anything other than an annoying hoop to jump through.
- alexnewman 8y agoI'd also argue it encourages worst practices
- matt4077 8y agoWhen has "subsidy" become the go-to narrative to argue against any sort of deference to real-world usage? You could just as easily frame CORS as "antibiotics for the people who dared to leave their house". (There's also a no-true-scotsman fallacy going on in your argument)
- guscost 8y agoMore like "mandatory medical testing at the airport because some people don't vaccinate" from my perspective. It's a "subsidy" because we all have to spend time on it, even though lots of people don't receive any benefit from it. It's not intolerable, the Web is based on community standards and responds to community needs, and I'm fine with that. But I'm always on the losing end of this one so I'm going to say so.