11 ms·
> But what about privacy? Well, you achieve that simply by not putting private information on a public network. But what about shielding my behavior from snoop
by hughw 4y ago
> But what about privacy? Well, you achieve that simply by not putting private information on a public network.
But what about shielding my behavior from snooping? Like my DNS queries, the web sites I visit.
I would also like to be able to identify myself and have others do so, with some assurance that nobody is impersonating me or them.
These are cases where I do want to, and must, put private (meta-)information on the public network.
- GuB-42 4y agoAs I already mentioned, TLS is a poor choice for snooping prevention. It does offer some protection since you don't know the exact resource you are requesting, but the domain is clear. If you really need that kind of privacy, I think there are more appropriate options. And also, why would you want to identify yourself? AFAIK, Gemini is very limited in term of uploading: there are no forms or PUT requests. The only reason I can think of would be access control, but that's something I would rather not have. On the server side, TLS only guarantees you that you are on the right server, but not that it is the right content, that part would be better served by something like a PGP block. Another advantage of using these kinds of digital signatures is that it wouldn't force additional complexity. It is just text: the server don't have to care about that, verification can be made client-side.