Newest Comments

  1. 0

    Interestingly, Solderpunk’s own AV-98 client lists support for both TOFU & CA certificate validation in feature list. Probably because it rides on the support there in Python’s SSL library.

    1. 0

      From back in February.

      1. 2

        Yes, a copy is on the Internet Archive luckily

        1. 0

          Is this down for anyone else?

          1. 2

            I didn’t track the development of the spec so I have no insight, but I very much took some of those decisions as a deterrent for those you want to keep away (a form of neo-luddism and I don’t mean that as a pejorative). Sad news is that if your capsule becomes popular, you will not (never?) reach the ability to serve your content on the scale of faang shrug

            The certificate/tls one does annoy me, because security should be a universal. Since the post was published, I’ve been thinking about the implications of not having the same model as elsewhere with regards to TLS. Aside from the privacy issue which the post points to (are you actually connecting to the genuine destination), the gemini documents don’t really do anything fancy so that’s not really a vector to attack the visitor, but your gemini client is likely linked to libraries which are prone to security issues e.g zlib

            1. 0

              Here are my thoughts on the author’s closing points. Bear in mind he knows lots about protocols and I know next to nothing about them:

              1. Split the spec into three separate ones: protocol, URL syntax, media type. Expand the protocol parts with more exact syntax descriptions and examples to supplement the English.

              I disagree with the suggestion to split the spec. Gemini was made to be accessible to casual coders. I think all the information necessary to do some hacking should live in a single document. A beginner Gemini developer making some quick tools should not have to think about what a URL syntax spec document is and know to refer to it. Expanding the protocol part, though sounds reasonable.

              1. Drop the TOFU idea, it makes for a too weak security story that does not scale and introduces massive complexities for clients.

              This seems like a hassle-vs-security tradeoff that the Gemini designers made deliberately. Time may prove that they picked this tradeoff wrong, but it comes with some interesting side effects. One is that it makes Gemini completely unsuitable for e-commerce or serious business, which may actually be a good thing. This by necessity keeps Gemini weird.

              1. Consider a way to re-use connections, even if that means introducing some kind of “chunks” HTTP-style.

              Personally I’m not swayed by the “It should be faster” arguments, because Gemini does not need to be fast. It was intended to serve small documents to human beings, who consume them rather slowly. The energy efficiency arguments, though, I do find compelling. It would be nice to see Gemini or some Gemini successor make some optimizations to minimize server energy consumption.

              1. 2

                I really dig that slabtops are coming back in DIY design. The M100, devterm, and now this :)

                And low power, low-spec machines too! Like the Lisp Terminal from a few weeks back, but this one is Forth :D

                1. 0

                  Nope.

                  Having big monopolies adopting a protocol is not a success. It is not a source of joy. It’s the opposite. It means they could stay relevant longer (and who want that?). It also means that they will create havoc by trying to destroy the decentralization momentum.

                  Easy: look at what Google did for XMPP.

                  So a huge Nope. (but it’s techdirt, those are monopolies groupies)

                  1. 3

                    I admire the devotion and knowledge it would take to design this thing. I’m sure the people who designed it would say “It’s very simple, actually”, but I think it’s very impressive and a least a little bit crazy.

                      1. 0

                        A few months ago the police also arrested activists from Extinction Rebellion in the Netherlands for planning to block a highway in the Hague. The activists were not allowed to enter the highway according to the police.

                        It actually generated a lot of media attention and many people came to protest and block the highway anyways. Meanwhile, the court has ruled that the activists have the right to protest, even on the highway.

                        1. 0

                          Looks like Germany is prosecuting the climate activists for financing terrorism

                          1. 0

                            Great idea. If you’re targeting bots, do filenames matter?

                            1. 2

                              I like friendica personally. But that’s not “an instance”, but another suite. Personally, libranet.de is a good one :)

                              there’s myriad more, even the tildeverse has a pleroma instance :)

                              1. 0

                                What is a good microblogging instance I could make an account on if I wanted to try out the non-Mastodon Fediverse? Somewhere others on Mastodon can follow me? It occurs to me that I don’t follow anyone who isn’t using Mastodon. Perhaps I should be a little bit of the change I want to see in the world.

                                1. 2

                                  exactly the reason why i have a pixelfed account and a few others

                                  1. 0

                                    It looks pretty much identical on my Firefox compared to Chromium, except for the font size since Firefox just refuses to render text that small.

                                    1. 0

                                      Wish the website was a bit more “portable”, the fonts produce different results on every browser I tried. I suspect the intended target was chrome. There’s a variation on smudged ink look on webkit based browsers, and Firefox just ignores the fonts and uses a different set :D

                                      1. 2

                                        That’s a great piece of pixelart and a great website style too. I love it!

                                        1. 0

                                          Similar tool to file(1) but implemented in Java.