Beacon
Security and privacy
privacy browser
SHOW HN2021
How HN took it
1 positive, 6 neutral or asking, 0 mixed, 5 critical, out of 12 comments about the project. Thread score -0.35.
Idea: 0 for, 3 againstDocs: 0 for, 1 againstPrivacy: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Explanation of WebKit-based certificate pinning was clear
From 1 comment
Thanks for the explanation!
tmikaeld on HN
Objections
DANE/DNSSEC is a poor fit for TLS trust; browsers won't support it
From 3 comments
This standard is DOA. https://blog.apnic.net/2019/05/27/dns-oarc-30-bad-news-for-dane/ An explainer: https://news.ycombinator.com/item?id=20026572
tptacek on HNBrowser vendors (notably Chromium) have already acknowledged that the best they'll be able to do is treat DANE like another CA, which leaves open the question of why they'd…
tptacek on HNpaging @tptacek (really hope there is more on DNSSEC in your upcoming SCW episodes because clearly the world needs it) I was out the moment I read the project bets on DNSSEC/DANE…
DyslexicAtheist on HN
Proof-of-work blockchain has environmental cost
From 1 comment
"Handshake leverages a blockchain based on unspent transaction output (UTXO) and proof-of-work (PoW) similar to Bitcoin for naming capabilities." This means it intentionally…
skyfaller on HN
iOS-only at launch; title should say iOS
From 1 comment
I think the title needs to say “iOS” in there.
ComputerGuru on HN
Unclear which engine Android and desktop versions would use; may be a Chromium clone
From 1 comment
I don't quite get what engine it's gonna use on android and desktop. If it's yet another clone of chromium, then it's not really anything new.
vort3 on HN
Requests
Android and desktop versions
From 2 comments
When do expect Desktop and Android versions? Thanks
kasperkerem on HNthanks, android and desktop versions coming soon!
ca98am79 on HN
Latency data for TTFB impact
From 1 comment
Can you share data on how much latency this adds to TTFB?
prdonahue on HN
Implement RFC9102 DNSSEC chain extension
From 1 comment
Something to consider in the future is implementing RFC9102[0] which is an experimental TLS extension for embedding the DNSSEC chain this should significantly improve TTFB. It'll…
buffrr on HN
Questions
How does the browser work on iOS given WebKit requirement
From 1 comment
Hm, how does this work with that iOS always run browsers using Safari webview? Doesn't this need a native browser implementation for the handshake and p2p to be secure?
tmikaeld on HN
Which engine for Android and desktop
From 1 comment
I don't quite get what engine it's gonna use on android and desktop. If it's yet another clone of chromium, then it's not really anything new.
vort3 on HN