scrpl

Small, less complex protocols are inherently less likely to be insecure all things being equal, simply due to reduced attack surface.

DNS was created for a different environment, at a time when security wasn't at forefront so it's not a good example of the opposite.

DNS is from 1983, give it some slack

Another reason to keep foundational protocols small. HTTP/2 has been around for more than a decade (including SPDY), and this is a first time this attack type surfaced. I wonder what surprises HTTP/3 and QUIC hide...

I‘m sure comcast is terrified that their users won’t be able to read my blog.

If the one doing the blocking is not at FAANG it would do nothing of sorts. And FAANG benefit from DDoS by getting people into their walled cloud gardens.

Great solution for a world without shared and dynamic ips.

Those movements are extremely animal-like, to the point of being unsettling (despite that I want a robot like that for myself)

That's because many corporate "donations" are not so much a donation as a way of soft-buying a feature.

It's hard for businesses hyperfocused on short-term gains to understand a long-term value of, for example, supporting an alternative for an industry-dominating Adobe toolkit. But the value is there.

And embedded systems (cars and stuff)...

That's just sad. Open Source support really needs to be normalized in corporate environment. Now it's more of an exception than the rule.

You don't have control because browser might not support of http3 at all. It's up to browser developers to decide when their support levels are mature enough to use by default. There's no other way of doing it.

Few years ago I wrote an article on HTTP/3 that was briefly featured on HN as well: https://news.ycombinator.com/item?id=24834767

I can't agree with author about it eating the world though. It seems like only internet giants can afford implementing and supporting protocol this complex, and they're the only ones who will get a measurable benefit from it. It is an upgrade for sure, but an expensive one.

This is insane! 11 hours or not, I didn't expect SD could ever run on hardware like Pi Zero.

I write about my experiences in tech and stuff I learned https://scorpil.com