Hacker News new | ask | show | jobs
by thomassmith65 490 days ago

  About control, to curb commercial activity and abuse, how would you expect that it should be done? (For most things the existing security is good enough but for commercial business you will want a better security for the purpose of the identification. But, maybe you have other ideas.)
I know too little about security to answer this in an interesting way. In the comment I posted immediately above this I mentioned a digital identity project. Pseudonymous identity seems like the way to go, but there needs to be a system to verify the a connection is associated with one human, and there needs to be a better way than the CA system to revoke access.

  I also have my own ideas for what I would want for a web replacement too (but, like Gemini, it does not have to destroy or be mutually exclusive with WWW or with anything else; 
I'm actually not so sure it's good to provide easy access from the normal web. I think Gemini is a good example: why use the actual protocol when you can use a proxy? Of course, to prohibit web proxying isn't organic, which is why an alternate network would require some kind of intervention (such as stepping in and cutting off IP ranges from the normal web, which admittedly doesn't do much considering VPNs, or maybe banning those pseudonymous accounts. etc). With a big pile of money, lawyers would be helpful!

  instead it should be between Gemini and "WWW as it should be if it was designed better".
Yes, Gemini is a little too dry. But a major use for the current web is reading 3 column layout articles... and HTML5 is overkill for that. I should clarify that trying to make a web that works better for actual web apps is imo pointless... but plenty of time people spend on the web doesn't require app-like capabilities.

  (Also note: I think that non-extensibility of Gemini protocol/file-format does not really work so well as they had expected.
My knowledge of Gemini is cursory. I've always found it interesting primarily because Gopher is nostalgic to me from my first few months on the internet way back in the age of the dinosaurs :)
1 comments

> but there needs to be a system to verify the a connection is associated with one human, and there needs to be a better way than the CA system to revoke access.

I am not sure that it is necessarily what is or should be the requirement, or that such a system is that helpful enough anyways.

If you are trying to do business, then you should need to verify that it is with the business that you are trying to communicate with and not a different one, so Let's Encrypt is not good enough since that only verifies the domain name. However, sometimes this is not necessary, anyways.

For revoking access, I agree that there can be other ways. For example, someone can provide revocation files and then some users might decide to trust those revocation files or not.

> I'm actually not so sure it's good to provide easy access from the normal web.

You might be right. (Scorpion file format uses TRON code rather than Unicode, which might have the side effect of making it difficult to access from the normal web, although that was not the reason for this decision. However, as you describe, this side effect may be beneficial, anyways.)

> Yes, Gemini is a little too dry.

Yes, and a few people had thought so. However, my comment is not only about what Gemini doesn't do, but also about things that WWW doesn't do, too.

> I've always found it interesting primarily because Gopher is nostalgic to me from my first few months on the internet way back in the age of the dinosaurs

Gopher is still in use, and Gemini FAQ also says it is not going to destroy Gopher either.