13 Mar 2025 |
lidel | I'm afraid PSL is the only realistic way of dealing with this.
In security space nobody cares about "client side" details, if the page is enabling malware and phishing attacks.
PSL will makes sure only the CID gets taken down by web2 tools, rather than the entire thing.
We already have *.dweb.link on PSL – I'll open a PR that adds inbrowser.dev and inbrowser.link below that.
ps. in case of censorship/shut down, people should know how to run gateways on localhost, rather some other DNS name. maybe we should have a single-binary published in https://github.com/ipfs/service-worker-gateway that embeds HTML+CSS and hosts them on localhost ? | 21:57:18 |
lidel | PR: https://github.com/publicsuffix/list/pull/2413 | 22:22:42 |
lidel | https://transparencyreport.google.com/safe-browsing/search?url=https:%2F%2Finbrowser.link%2F&hl=en marks https://inbrowser.link/ as insecure, likely due to phishing.
we can fill https://safebrowsing.google.com/safebrowsing/report_error/?hl=en once we get accepted to PSL – i dont want to do it before, to not sabotage that process | 22:28:05 |
Adin Schmahmann (low availability) ping Cameron Wood or lidel | lidel I forget will the PSL mess with how we manage the settings and/or root page? | 23:04:30 |
lidel | it should not, iirc we use iframe+postMessage and not direct access to cookies / storage | 23:09:03 |
| slurp0089 changed their display name from slurp0089 to slurp0089#0. | 23:58:10 |
| slurp0089 changed their display name from slurp0089#0 to slurp0089. | 23:58:13 |
14 Mar 2025 |
miss_a. | Thanks for sharing. | 05:25:31 |
| shacqeal changed their display name from shacqeal to shacqeal#0. | 08:51:37 |
| shacqeal changed their display name from shacqeal#0 to shacqeal. | 08:51:42 |
Daniel Norman | > ps. in case of censorship/shut down, people should know how to run gateways on localhost, rather some other DNS name. if ipfs-desktop is not an option, maybe we should have a single-binary published in https://github.com/ipfs/service-worker-gateway that embeds HTML+CSS and hosts them on localhost ? (edited)
That’s an interesting idea. I opened an issue: https://github.com/ipfs/service-worker-gateway/issues/629 | 12:55:14 |
Daniel Norman | Merged! https://github.com/publicsuffix/list/pull/2413#event-16774844975 | 14:04:58 |
lidel | Awesome. cc SgtPooki for visibility (it should not impact the way config is loaded, postMessage's sole purpose is to facilitate cross-origin comms, but if we ever depended on cookies we may need to switch to postMessage) | 14:25:35 |
| SgtPooki joined the room. | 14:25:46 |
lidel | Ok, wrapped up: I've filled ask to remove https://inbrowser.link/ and use {ID}.ipfs.inbrowser.link (pointing at merged https://github.com/publicsuffix/list/pull/2413) | 14:29:39 |
Adin Schmahmann (low availability) ping Cameron Wood or lidel | lidel you should do the same for .dev as well (seems to also be on the list) | 14:32:37 |
SgtPooki | so, iframe (host domain) talks to parent frame (subdomain), which updates indexedDB on parent frame (subdomain) and then sends request to service worker saying, hey, our indexedDb config has been updated, update yourself, and then page refreshes once SW says “i’m done reloading my config” | 15:16:55 |
SgtPooki | here is part of the process: https://github.com/ipfs/service-worker-gateway/blob/b081577b10c17d93c7fe0bf1c297d6b03cae74f8/src/pages/config.tsx#L92 | 15:17:13 |
SgtPooki | postMessage from iframe to parent | 15:17:23 |
16 Mar 2025 |
| ruben_wolff changed their display name from mort_._. to ruben_wolff#0. | 12:39:52 |
| ruben_wolff changed their profile picture. | 12:40:02 |
| ruben_wolff changed their display name from ruben_wolff#0 to ruben_wolff. | 12:40:06 |
| @undroid:matrix.org left the room. | 21:14:16 |
17 Mar 2025 |
| qwq114514123 changed their display name from qwq114514123 to qwq114514123#0. | 14:25:11 |
| qwq114514123 changed their display name from qwq114514123#0 to qwq114514123. | 14:25:16 |
| seaidear changed their display name from seaidear to seaidear#0. | 15:03:32 |
| seaidear changed their display name from seaidear#0 to seaidear. | 15:03:38 |
| @rittik:matrix.org left the room. | 15:41:09 |
| 0xflesh joined the room. | 17:13:59 |
18 Mar 2025 |
| humuhimi joined the room. | 03:40:07 |