[ANN] Public HTTP Proxy at gem.ondollo.com

Sean Conner sean at conman.org
Tue Jan 26 04:28:40 GMT 2021
It was thus said that the Great Mansfield once stated:
> On Sun, Jan 24, 2021 at 7:23 PM Sean Conner <sean at conman.org> wrote:
> 
> >   Also, your client doesn't handle the following link properly:
> >
> >         gemini://gemini.conman.org/test/UCSD-Pascal-source.zip/
> >
> > It strips off the final '/', which does The Wrong Thing in this case (yes,
> > the final '/' is significant).  Speaking of which, you don't handle MIME
> > types properly---the page through your proxy tried printing the resulting
> > ZIP file as text.  I have a few other pages that return non "text/*" MIME
> > files.
> >
> 
> Humm... the CLI version (that uses the same library) didn't fail on that
> link. I think the intent is to get a directory listing of the content
> inside the zip file, right? 

  Right.

> I'll have to walk through the code specifically
> for that to see where it went wrong. Thanks for writing those tests.

  You're welcome.

>   It also sends a client certificate.  Unexpected, but something I think
> > people should be aware of.
> 
> True. The client code underneath the HTTP handler always sends a
> certificate when it makes the Gemini call. It's the same certificate for
> every call, so there's nothing leaking from the users browser into the
> certificate. Was that the concern?

  I wasn't actually expecting it to work!

  And personally, I find it hilarious (and wonderful) that it's the same
certificate for everybody.  Certainly makes it harder to track individuals,
but I can see it breaking some sites that may use certificates to present
different information.  

> Thanks for your feedback!

  And thanks for the feedback on the feedback.

  -spc



Archive home | About this archive