DE version is available. Content is displayed in original English for accuracy.
Advertisement
Advertisement
⚡ Community Insights
Discussion Sentiment
73% Positive
Analyzed from 2162 words in the discussion.
Trending Topics
#https#gemini#finger#web#browser#com#still#html#http#images

Discussion (58 Comments)Read Original on HackerNews
I've tried the same now, 30 years after my last finger. It wasn't even installed on Ubuntu by default. I had to install it, and expectedly:
[1a] - https://www.shodan.io/search?query=finger+%2Bport+79
[1b] - https://www.shodan.io/search?query=finger
[2] - https://github.com/noveltylanterns/fingers
I still remember a book about the internet I got in the early 90s... it was a couple of hundred pages, and then in the last chapter there was one paragraph in a section about new technology for something called "the World Wide Web".
For years I would be frustrated at people who would conflate the internet and The World Wide Web. I gave up on that years ago, though.
Notably missing Safari and WebKit
On the other hand, there's Ladybird, Servo and Chawan which are indie, and although they're still in alpha - depending on the sites you browse daily (like HN - which works fine), you might be able to use one of these as a daily-driver.
https://gs.statcounter.com/browser-market-share
Safari makes up a sizeable percentage of the market share so skipping WebKit here is a strange choice.
It's not that HTML forces well-meaning creators to add complexity, size, or user-hostile behavior; it's that an ecosystem that permits such behavior eventually becomes swamped by adtech and other user-hostile content for financial gain. The problem is that this content drowns out organic, human-centric content.
Having said that, while format restrictions (to plaintext, markdown, gemtext, HTML without JavaScript) do help mitigate the damage somewhat by making tracking harder, I doubt they are sufficient: even text-only forums can become overrun with spam, ads, bots, and propaganda if they lack suitable moderation.
Ultimately folks who want to browse a web of authentic human content need to combine format restrictions with blocklists and web-of-trust tools. Browser plugins, reader mode, and customized search engines can already get us partway there, but there are still gaps.
You could theoretically have a web that does not bloat. HTML is a very good technology for building clean documents. You are not going to get that, though. What happens instead is that you start on a thoughtfully designed page and are always one click away from a cookie consent banner on top of an email capture modal beside four flavors of ad. "Sure, but you can install adblock/VPN/Pi-hole/reader mode/turn off JS/etc/etc..."
I like Gemini because it actually delivered a lightweight protocol that provides what I was looking for. Additionally, it is not just a technology. It is an ecosystem that gained more traction than the hundreds of other attempts that never went anywhere.
The spec made mistakes, but HTTP has mistakes too.
I definitely should have tested, I did not expect this to get on HN lol
edit: finger brennan@omg.lol works :)
I've been using this browser since around 2000. I think some HN commnters would be syrprised at how much of the www I can digest using this program. They wouldn't believe it was possible
I use localhost TLS forward proxies for HTTPS. Breaking TLS turns out to be an excellent method for blocking ads and telemetry, in addition to DNS and "ad blockers"
People like to pretend that Google and other so-called "tech" companies have killed off HTTP
It may be true depending on one's www usage, but I see evidence that HTTP still alive
When their "business model" is collecting data from and about unsuspecting computer users, it makes sense for these companies to want the transmissions encrypted. If users saw what is being sent over the wire to these companies they might be upset. If competitors saw it then they might use the data themselves. Too much data collection... I digress
There are bands of vocal "tech" workers who try to drown out any mention of HTTP. Others try to make fun of FTP
But both are still being used in a variety of places, whether it's by CAs themselves^1, Google, e.g., for autocomplete^2 or even the NY Times^3 or MSN
Anyway, the point is that these companies may try to kill off usage of certain protocols where it suits them, e.g., remember FTP in the web browser. But the protocols still survive and people still use them, even if it's only the "tech" workers themselves, and others in small numbers
1.
http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2026q2
http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2026q2.c...
http://crl.globalsign.com/ca/gsatlasr3dvtlsca2026q2.crl
2.
http://clients1.google.com/complete/search?client=heirloom-h...
3.
via Fastly
https://raw.githubusercontent.com/rezmoss/cloud-provider-ip-...
Perhaps a "Simple Web" spec could be created to audit a site and verify its privacy and simplicity protections. Things like "Cookies only for auth", "No JS" or "low JS", "No ref tracking in or out", "No tracking pixels", etc.
* auth: Look at https://github.com/kr1sp1n/awesome-gemini#services Tons of services support some form of auth.
Edit: https://martinrue.com/station is another service I use that's missing in the above list.
* images: click to load
Janky but doable. Janky is the price you have to pay to avoid adtech.
I don't understand, unless adtech is holding your family hostage and forcing you to adtech. Can you elaborate?
* https://geminiprotocol.net/docs/protocol-specification.gmi
* https://iana.org/assignments/media-types/media-types.xhtml
No inline images is a significant restriction indeed but it also gives you a high degree of confidence that most Gemini pages will be very lightweight. I don't find it that limiting. It all goes back to the point that Gemini is intended to supplement the web and not replace it - if you want image heavy content you can get it elsewhere. Personally I find the lack of inline formatting and links more frustrating.
But actually loading images separately can work well. If you are reading for the text content you can save the time and bandwidth to load of all the images, or maybe you want to look at one image in detail, you can load just that one, and zoom or frame that independently of the surrounding text.
My project at the moment is kind of related to these "simple web" ideas. Instead of giving up on HTML altogether I'm making a simple web browser, to see if there's a way to render even relatively complex existing pages, like Wikipedia or news sites, without needing to implement much or any CSS. A bit like "reader mode". (link if you are interested: https://codeberg.org/kaimac/weaver)
- no scripts of any kind
- no cookies
- no forms
- all resources (e.g., styles, images) needed for display inlined
- a spacious minimum cap on data URI length
- elaborate the <a> tag a bit to allow a series of content addresses (hashes, IPFS, magnet URIs, etc.) for references
Basically, a "dead" subset of HTML suitable for distributing documents.
Browsers already support XML.
You can spin up a HTML-but-restricted XML grammar (with extra stuff even, like footnotes and stuff) and a CSS file in maybe half an hour, and it'll render in your browser just fine.
(Yeah, it'll be missing all the accessibility provisions, but you know, the base to build on is there, whereas "MarkDown in the browser" rendering has been often suggested and never implemented).
And "tracking pixels".
Keeping them separate was a smart move, and entirely consistent with the underlying philosophy.
As far as i understood, NSA has access to the encrypted communication on the internet so all bets are off. They '"collaborate" with certificate issuers, they monitor all big internet nodes in the "west" and all relevant software is produced in their jurisdiction.
There is such a thing as overestimating the power of the NSA, if the spooks actually had undermined the system to that degree they wouldn't need to lobby for all the surveillance bills that keeps popping up.
[0] And you can't get a fake certificate either without it being visible in the certificate transparency logs, or being an obvious fake since it is absent in those logs.
> Chrome alone controls roughly 73% of global desktop browser market share.
> More and more, the webdevs of the world test and develop for Chrome only.
> It doesn't need to be this way. https:// is not the only way to connect and interface with the Internet
These are completely unrelated concepts! Google/Chrome doesn't control HTTP nor HTTPS. There is nothing wrong with the protocols, you can just make your website plaintext file if you like.
https://en.wikipedia.org/wiki/Web_Environment_Integrity
It's also on completely different OSI layer.
I don't see the difference between your comment and a statement like "I don't like email so let's stop using TCP".
But the day your bank and insurance implement WEI, it'll going to be too late to switch to another protocol. Your existence will depend on it.
When you browse to a pristine html page containing zero adtech it contains links. Those links you might click on without first thoroughly vetting them for behavioral exhaust.
Hyperlinks are a vector for contagion. A new protocol creates isolation. What's wrong with both existing? Defense in depth at all levels, I say. You think https can't enshittify, maybe you just haven't waited long enough.