top | item 20883207

(no title)

lbatx | 6 years ago

We fought a similar battle with Javascript-enabled sites (remember when sites worked without Javascript?) and lost...

discuss

order

danShumway|6 years ago

I wasn't part of that battle. I fall into the camp of believing that clientside logic is often preferable to serverside logic, because users are more able to inspect, modify, and archive locally running code. So not only was I not a part of that battle, I was actively encouraging people to make your life worse.

But I am a part of this battle.

I don't want to start a fight about Javascript; that's a complicated issue. I just want to point out that the "we" you refer to in the privacy battle may be a fair amount larger and more diverse than the "we" was in the Javascript battle.

lbatx|6 years ago

I get that they are different. It was an analogy. Either way, I don't think there's enough momentum to stop it this time either.

BTW, your argument about being able to inspect local code still seems moot in light of the fact that if you interact with the server, you still have to trust it. 90% of the code might be local, but you still have to worry about that 10% that is opaque to you. And there's no practical difference between 10% of code being opaque and 90% being opaque. The "bad stuff" could happen in that 10%.