[tech] [spec] On extending gemini

[nervuri]

On Sun, Feb 21, 2021, Michael Lazar wrote:
>> I might update my server software to automatically blackhole any IP
>> address which tries to request a favicon file.

>This is disgraceful, shameless intimidation.

It's also bad on a technical level.  It would only take one bad actor to
get all Tor exits blocked.  This also applies to other shared IPs like
VPN exits and other proxies.

It's a pity that Drew chose this off-putting type of approach.  It tends
to have the reverse effect.

A good argument against automated favicon requests is that they
contribute to fingerprinting.  Not by much, but little things like this
can add up.  The alternative approaches suggested by Drew don't have
this problem:

> There are alternatives, such as generating a colored icon or image
> based on the hash of the domain, or allowing users to set a custom
> favicon themselves.

Here's what Solderpunk had to say on the topic:

https://mailing-list-archive.gemi.dev/www/2020/000612.html
https://mailing-list-archive.gemi.dev/www/2020/001060.html