[tech] Re: [spec] Adapting the HTTP Common Logging Format for use by Gemini servers

Petite Abeille petite.abeille at gmail.com
Sun Dec 27 21:53:20 GMT 2020



> On Dec 27, 2020, at 22:48, colecmac at protonmail.com wrote:
> 
> Doesn't this provide no security though? It's trivial to hash all IPv4
> addresses and compare them. Additionally, this doesn't provide any
> security to clients, because they can't guarantee this is in effect.

Genau. Privacy by obscurity is no privacy at all.

Furthermore, TLS leaves a big, fat digital signature trail. 

In any case, best to leave such details to the implementations.




More information about the Gemini mailing list