web0 manifesto
“…web0 is web3 without all the corporate right-libertarian Silicon Valley bullshit.”
Sign your name and join me in starting the year as you mean to go on: without tolerating any bullshit.
Happy New Year! :)
G’morning folks, how lovely to wake up and see the new signatures on the web0 manifesto
By the way, if you are having trouble signing because your email server implements an archaic anti-spam technique called greylisting. I’m going to look into adding basic support for it but please also contact your email provider and remind them it’s 2022. Spammers have long worked around greylisting. Today, it just makes things harder for legitimate small web use cases.
Also, some folks have mentioned on the fediverse that they don’t have a web site to link to… please feel free to use the link to your fediverse account (Mastodon, etc.)
But please don’t link to people farmers like Twitter, Facebook, etc., or to sites with trackers from them.
I’m going to look through the links today and contact you to see what we can do if any look problematic.
Finally, a couple of you have reported not being able to add your site if it doesn’t load over a secure connection (TLS).
That’s by design :)
It’s 2022 and we should all be doing our best to encourage good practices. HTTP is not secure. It means people who visit your site could be hit with man-in-the-middle attacks.
Thankfully, we have a free/automated way to implement TLS now with Let’s Encrypt.
And servers like Site.js (https://sitejs.org) do it automatically for you.
@aral I am a big fan of #LetsEncrypt and use it on many systems. However, there is a legitimate opposing viewpoint: 1) it prevents self-sufficiency; 2) A small set of large orgs decide who's a legit CA for billions; 3) Let's Encrypt won't issue certs for countries the USA has sanctioned.
#NNCP author has expressed his thoughts in more detail on this: http://lists.cypherpunks.ru/archive/nncp-devel/2109/0356.html and http://lists.cypherpunks.ru/archive/nncp-devel/2107/0276.html and http://lists.cypherpunks.ru/archive/nncp-devel/2108/0290.html . It led me to hosting a TLS mirror of the site
bonifartius 𒂼𒄄
@jgoerzen @aral
while letsencrypt is frictionless, i'm still pissed that _for decades_ http://www.cacert.org wasn't "good enough" to be included in browsers (cf. point 2).
all of a sudden some big tech builds let's encrypt and that's totally peachy to include. my guess is that in the end it's about control (cf. point 3).
why on earth should i trust silicon valley more than some random folks on the net?
