GuillaumeRossolini

joined 2 years ago

@mfed1122 yeah that is my worry, what’s an acceptable wait time for users? A tenth of a second is usually not noticeable to a human, but is it useful in this context? What about half a second, etc

I don’t know that I want a web where everything is artificially slowed by a full second for each document

@Passerby6497 yes I’ve been told as much 😅

https://lemmy.world/comment/18919678

Jokes aside, I understand this was the point. I just wanted to make the point that it is feasible, if not currently economically viable

[–] GuillaumeRossolini@infosec.exchange -5 points 1 week ago (1 children)

@rtxn all right, that’s all you had to say initially, rather than try convincing me that the network client was out of the loop: it isn’t, that’s the whole point of Anubis

[–] GuillaumeRossolini@infosec.exchange -2 points 1 week ago (3 children)

@rtxn validation of what?

This is a typical network thing: client asks for resource, server says here’s a challenge, client responds or doesn’t, has the correct response or not, but has the challenge regardless

[–] GuillaumeRossolini@infosec.exchange 4 points 1 week ago (18 children)

@mfed1122 @tofu any client-side tech to avoid (some of the) bots is bound to, as its popularity grows, be either circumvented by the bot’s developers or the model behind the bot will have picked up enough to solve it

I don’t see how any of these are going to do better than a short term patch

@AEMarling yes thank you

B&N don’t seem to agree with themselves whether my order went through or was cancelled, but they’ll sort it out 🤣

[–] GuillaumeRossolini@infosec.exchange 2 points 2 years ago (2 children)

@AEMarling never mind the point is moot, I didn’t realize that B&N were unable to deliver ebooks to people not physically located in the US 🙃

[–] GuillaumeRossolini@infosec.exchange 1 points 2 years ago (3 children)

@AEMarling hi! I imagine it’s early to ask about translations? I’m comfortable reading English but as a gift, I’d need French/Spanish

[–] GuillaumeRossolini@infosec.exchange 5 points 2 years ago* (last edited 2 years ago) (1 children)

@rikudou @voxel
ASFAIR it used to be even worse than that, because if you didn’t want SNI (for compatibility reasons or whatever), but you still wanted a certificate, you had to have one server for every hostname (because each had its own IP), assuming you could afford the additional IP space

Granted you didn’t need a physical server, but that was still a bigger cost

Some servers are more flexible on that front, but early SNI didn’t have those

view more: next ›