Hacker News new | ask | show | jobs
by kentonv 2052 days ago
Limiting Workers to only be able to talk to servers that had "opted in" would be too limiting. Lots of people use Workers to talk to third-party APIs. And, many people are building whole applications entirely on Workers, with no origin server at all.

> I'm guessing it's possible to amplify one request quite a lot which could annoy a victim server

We have other defenses against this. :)

> `atob` and `btoa`

These are indeed awful and I wish browsers would define something better. :/