Hacker News Reader

One thing that I like to do is use opaque representations of a data structure (like base64-encoded JSON) in URLs in situations where I've been compelled to optimize away one of my closures or continuations. The amount of code increases and it is certainly less elegant, but I only write a little more code by hand (the encoded data structure acts like the 'scope') and I keep the script kids from messing with the GET arguments.

View on HN

How does that stop script kids from messing with the GET arguments? You are still passing state in the URL, no?

i can make the encoding of the data arbitrarily secure at a cost of time/space. in the simplest case of base64, it is just security by obscurity which is why i only asserted that it keeps out juvenile delinquents. if you want it to be robust then you must use encryption of course.

Signatures.

Reply on news.ycombinator.com