Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

All this means is that any server can choose to present any bytes, even with TLS, as a response to any request. This isn't a novel observation.

If a signed exchange includes a URL, that URL must be signed for the browser to respect the field.



Right, but this means proposing signed exchanges as a solution to AMP's strategies is kind of nonsense, since it's a semantic problem whether a page is acting as a proxy for another, and a technological solution doesn't work here.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: