undefined | Better HN

0 pointsSpivak6y ago0 comments

The person who wrote your application stood it up using that CDN though. There are two parties we're concerned about: you and the entity you're communicating with.

You trust your device and the entity, and the entity trusts the infrastructure and services they're using. Everything else is the enemy. So moving the barrier to a CDN which the entity trusts is actually an improvement over intermediate ISPs which neither of you trust.

0 comments

the84726y ago

They may simply not care and only "trust" the CDN in so far as it bypasses local resolvers. I.e. they might be using it for reasons not aligned with my interests and not vet the CDN at all.

j / k navigate · click thread line to collapse

0 pointsSpivak6y ago0 comments

The person who wrote your application stood it up using that CDN though. There are two parties we're concerned about: you and the entity you're communicating with.

0 comments

the84726y ago

They may simply not care and only "trust" the CDN in so far as it bypasses local resolvers. I.e. they might be using it for reasons not aligned with my interests and not vet the CDN at all.

j / k navigate · click thread line to collapse