3 ms·

I am the creator here. Thank you for taking a look! You raise a good point, as others in this thread have. Forced-javascript + security just don't jive. I shou

I am the creator here. Thank you for taking a look! You raise a good point, as others in this thread have. Forced-javascript + security just don't jive. I should have known that. But one aspect of the site's small server-footprint make the javascript somewhat necessary. For commenting and voting at least... I plan on making a text only version of the homepage, and linking to that at the bottom footer as I do the rss feed: https://cryptanalys.is/rss.php https://cryptanalys.is/rss.php (which is currently not visible due to an encoding error apparently!) Maybe a "retro" version of the homepage would be to your liking? Like this: http://retro.hackaday.com/ http://retro.hackaday.com/ The source code is not public, yet. I don't see what good it would do to publish the source of a website from a security perspective, though. It's not like you can take the digest of a webpage and prove that it's coming from the source code on github.

krapp 13y ago
I understand using js to push some of the rendering time off on the user but surely you could mitigate some of the overhead with caching headers. I mean, the pages themselves are not that big... As far as the source code goes, true enough (that seems to be a fundamental problem with applying open source ethics to the web) but as long as you're trying to attract security-minded individuals, maybe let them make pull requests and improve the security of the site? Still though, it looks nice and I do like the collapsing threads.
- GigabyteCoin 13y ago
  I appreciate your comments. I'm surprised you noticed the collapsing threads due to the lack of comments on Cryptanalys.is thus far, but there have been some. I'm working on a read-only version of the homepage that users without JS will be redirected to (And more politely informed that they must enable JS in order to participate) but nobody should be stopped from reading the website simply for not being able to run JS. You are right.

krapp 13y ago

I understand using js to push some of the rendering time off on the user but surely you could mitigate some of the overhead with caching headers. I mean, the pages themselves are not that big... As far as the source code goes, true enough (that seems to be a fundamental problem with applying open source ethics to the web) but as long as you're trying to attract security-minded individuals, maybe let them make pull requests and improve the security of the site? Still though, it looks nice and I do like the collapsing threads.

GigabyteCoin 13y ago
I appreciate your comments. I'm surprised you noticed the collapsing threads due to the lack of comments on Cryptanalys.is thus far, but there have been some. I'm working on a read-only version of the homepage that users without JS will be redirected to (And more politely informed that they must enable JS in order to participate) but nobody should be stopped from reading the website simply for not being able to run JS. You are right.