The utopian web

Today I'm feeling optimistic thinking of corporations falling and billionaires getting killed in wars and true freedom for the peoples of the world, so I dumbly got to wonder how that would impact my specific choice of career: webdev. The world wide web is a bloated mess with corrupt leadership and there's a reason why the only ones who can keep up with web browser development are Google and Mozilla (financially backed by Google). In a better world the internet will be simpler and private, yes, but will it be anonymous? Is Tor the future or do we need to know who's contacting us to avoid DDoS attacks and verifiably authenticate each other? And what of domain landlording? Computing power? Javascript or native apps? Back to gopher? Social media? Porn? Warfare??? I know there's a thread for WWW alternatives but here we imagine the perfect web for a free future and how we start making it now.

>>75341 overly optimistic, wars are painted with the blood of the poor

>verifiably authenticate each other public private keypair encryption for signatures is as good as it gets. You can ride the existing cert system or run some private foss version. >And what of domain landlording Simply use existing domains as relay stations for custom top-level domains. Say you type yoursite.dns2 and the browser knows .dns2 means send request for address to relay_dns2.com . Ideally probably as a plugin for browsers because accessibility is biggest hurdle for this. >Javascript or native apps? Both as it already is the case to service mobile&browser. Separate data from style entirely like rss. With a properly standardized data model you can have users choose between global themes or accept site-specific themes, global theme is a good idea for accessibility for people with bad vision. The other benefit is only pushing data = reduced traffic.

>>75341 >Is Tor the future or do we need to know who's contacting us to avoid DDoS attacks and verifiably authenticate each other? We can always bolt on a "verify you are a person" step outside of the routing level. I believe web of trust has underappreciated potential to solve the bot issue, but obviously bootstrapping it to the point that network effect takes off requires focusing on communities that could use web of trust but aren't even though they are tech-savvy enough. Does anyone know any obscure blogs or anything that focus on web of trust? (for bot mitigation or other functions, all the same cause) I have seen surface-level resources like weboftrust.info. I am a bit skeptical whenever cryptocurrency-industry people get involved and bring in "solutions" shoehorning in a blockchain and complicate assumptions for no advantage. At least they are making standards, which are impartial to their wage slave tech stack. I've seen a bold, maybe naive, implementation in the form of the Duniter currency. This architecture isn't even their big thing, they are all about a stable and fair inflating currency. They use a web of trust to gate receiving participants- part by the honor/prudence of the links of the network and part by their ability to automatically snip off cancerous scammer branches by graph theoretic properties. It has been enough for them so far.

>>75341 I don't think the utopian web necessarily needs to be anonymous. It just needs to be decentralized and isolated from corporations. Have you guys checked out gemini ? It's an interesting project that aims for a minimalist web experience. >Is Tor the future or do we need to know who's contacting us to avoid DDoS attacks and verifiably authenticate each other? I don't think binding a public key to its owner to authorize a connection within a hidden network is the only solution to the botnet problem. Purely distributed networks get more resistant to attacks by gaining more non-attacking participants. >>75351 >Simply use existing domains as relay stations for custom top-level domains. Say you type yoursite.dns2 and the browser knows .dns2 means send request for address to relay_dns2.com . Ideally probably as a plugin for browsers because accessibility is biggest hurdle for this. i2p uses address books which map human-readable names to long-term destinations, associated with services. It's also local-first there is no recognized global namespace, you decide what any given .i2p domain maps to in the end but you can also subscribe to public address books.

>>75448 >we can always bolt on a... then anyone with a good wrench, a pair of bolt cutters, or a hacksaw can simply sidestep that problem and insert bots anyway.

Idk if this is quite the thread to mention this, but I am not sure why cryptographic signatures and keys such as PGP are not more generally adopted. Just the other day I ran into a phony mercadolibre (latam version of amazon) phishing site, and it looked quite convincing. I looked everywhere for some way ot verify whether it was indeed who it claimed to be (it wasn't), but it occurred to me, why doesn't the original site have some kind of cryptographic signature that you can verify yourself whenever you're not sure whether you're visiting a legit site. It's so fuarrrking dumb. And the same applies to the proliferation of passwords with crazy constraints (must have a capital letter, a number, a symbol, and at least one hebrew letter and an emoji), when we could just have a single cryptographic key with which to aunthenticate to other sites. Well, I am not really very versed in these kinds of things, but wouldn't it be a lot more convenient? We could dispense with the whole cloudflare soykaf (btw, if someone decides to attack cloudflare itself, wouldn't that mean attacking all it's customers at the same time?) and one could just verify that they are a human by effectively using their key. If you are found to be flooding with requests your key is invalidated and disallowed from issuing requests for a while. I understand that might have the potential to profile netizens by their crypto keys and harm anonymity, but it isn't like everybody would be forced to use a key to access any site, nor to be limited to a single key, one could have several identities, and everything would be kept in it's own physical location, to be verified by a single master password, that way instead of having to remember 10 variations of a single password, anyone would just need one fairly complicated pass that opens all keys. I know there are password managers that do this, but I suspect having an actual cryptographic signature is a way better security measure. And yet nothing like this is ever done. Maybe for bitcoin, but that's it.

>>76405 not to discourage the planning of better things but this is not something that has been entirely overlooked or anything https://en.wikipedia.org/wiki/Extended_Validation_Certificate

>>76405 >why doesn't the original site have some kind of cryptographic signature that you can verify yourself whenever you're not sure whether you're visiting a legit site It has, most legit websites have TLS/HTTPS certificates from some kind of certificate authority, which show the authenticity of the website. But again, who's going to check certificates for every website they visit?

webdev would hardly exist as a job without the whole superstructure of soykaf that's keeping the elites feeding off humans.

You sound like a total ACAB tranny saying this, but okay

>>75341 The snow glows white on the mountain tonight Not a footprint to be seen A kingdom of isolation And it looks like I'm the queen The wind is howling like this swirling storm inside Couldn't keep it in, heaven knows I tried Don't let them in, don't let them see Be the good girl you always have to be Conceal, don't feel, don't let them know Well, now they know Let it go, let it go Can't hold it back anymore Let it go, let it go Turn away and slam the door I don't care what they're going to say Let the storm rage on The cold never bothered me anyway It's funny how some distance makes everything seem small And the fears that once controlled me can't get to me at all It's time to see what I can do To test the limits and break through No right, no wrong, no rules for me I'm free Let it go, let it go I am one with the wind and sky Let it go, let it go You'll never see me cry Here I stand and here I stay Let the storm rage on My power flurries through the air into the ground My soul is spiraling in frozen fractals all around And one thought crystallizes like an icy blast I'm never going back, the past is in the past Let it go, let it go And I'll rise like the break of dawn Let it go, let it go That perfect girl is gone Here I stand in the light of day Let the storm rage on The cold never bothered me anyway