Rick Swift & Apple & Embedded I make things. Sometimes, I’ll talk about it here.

My Gorram Frakking Blog

HTTP Future Features

I have no idea what’s in store for HTTP 1.2 and beyond, or if there’s even any work being done on it. But here’s one feature I’d like to see.
In general, an HTTP request is made to be secure or non-secure by the scheme used in the URL sent by the user agent (https: or http:, respectively). However, this puts a burden on the developer of the website (usually a webapp) to ensure that URLs get written correctly.
This is a consequence of the use of SSL for HTTP security. SSL happens at a protocol layer below that of HTTP. The secure connection is established first, then the HTTP protocol is layered on top of that. By the time the server gets a chance to determine what resource is being requested, the SSL connection must have already been established.
It makes much more sense for an HTTP request to be made, and if the server determines that the requested resource is secure, that the connection then become secure. In other words, the requested resource should be able to dictate whether or not it needs to be secure.
This means we need a way to transparently make secure a connection that began unsecure.
There are complications with this, of course. Many times, information needs to be sent as part of the request in a secure fashion (your login and password information, for example). A way to handle this needs to be devised, of course.
Even the specific URL might need to be secure. That’s what HTTP currently does. The only thing you can’t keep from prying eyes is the IP address and port to which the request is being sent.
There are ways to mimic this behavior. For example, an unsecure request to a secure resource can cause a secure redirect. But redirects cause problems in the user agents, most notably involving the back button.
Okay, that’s all I can write for now, but I’ll try to get back to this subject later&hellpi;

Excellent Teaching

A middle school teacher has chosen to educate her students about the many perils of drug abuse by discussing the financial costs. In the reported story, a young girl comes home and reveals to her parents that she has a $300 (monthly?) pot habit. I think that’s terrific. Not the addiction, but that the realization of the (very tangible) financial cost allowed her to go to her parents with it.
On the other hand, one parent figured it was a bad idea to educate kids in this way, saying that they have enough temptations as it is. Whatever. Information and education are never as dangerous as ignorance. The only time information becomes dangerous is when it’s incomplete.

Especially in America

I came across this article about Fundamentalist Mormons. Well, really, it’s an article about a book written by one such Fundamentalist who murdered his wife and daughter in the name of his religion.

Afer hearing that Elizabeth Smart's kidnapper was an excommunicated Mormon, Dan Lafferty correctly deduced something about the crime that even seasoned lawmen failed to suspect: “I immediately guessed that he was probably a fundamentalist, and that Elizabeth was somehow involved in a polygamy situation.” Lafferty ought to know...

Now, I’m not so naive to think that this sort of extremism never happens in America; on the contrary, I’m very concerned that the religious right (usually the Christian right) has far too much influence in American politics and society. Although extremists can be found anywhere (look at various Islamic countries), there’s something especially sinister about finding non-Islamic zealots in America.
This entry will hopefully be the start of a series of comments reflecting my feelings about religion and social aspects often affected by it.

Panther Rocks

Yes, I'm special. I've got Panther. Not a pre-release, the actual GM. Weeks early, no less.
I must say, it really rocks. So many improvements, so many things I've been waiting.
Although you still can't let go of scrollbars.
More to come...

Blogging Friends

My dear friend Yellie has a blog. Check it out. She's much better at it than I am.