Signed Pages Reviews

Ghost Reviews

Signed Pages mentions (12)

• E2EE on the web: is the web that bad?

  There is "Signed Pages" by the debeloper of EteSync. It is a browser extension, that checks webapps based on signatures in the html file. The addon then warns the user if the signature is not correct or - if I remember correctly - the source changed. This allows you to be sure what webapp code was delivered. But it seems like it did not really get used outside of his own projects. - Source: Hacker News / 4 months ago

• Cloudflare and CDNs - call for community opinions

  EteSync has implemented something called Signed Pages, this might be worth looking closer at. This uses PGP keys which is preloaded into the browser; but I suspect that will be a barrier too high for most non-tech users. Source: about 1 year ago

• Truly safe?

  There are also projects like signed web pages which can also help increasing the trust level to some degree. But that requires that you can download the source code and regenerate the verification hash locally - or have other trusted methods to verify the hash value hasn't been modified as well. The current concept is reasonably sane, but it requires too much from users currently to make it widely used. Source: almost 2 years ago

• Security experts declare all Proton apps secure after security audit

  > The server can at any time start serving malicious payloads True, and I call this threat model "Beware Each and Every Fetch" (BEEF) in contrast to the more common TOFU model (although if you trust a desktop app to auto-update itself then these two models might not be all that different). In any case, I think you're being a little quick to dismiss the idea of server-hosted applications. It's true that browsers... - Source: Hacker News / about 2 years ago

• ProtonMail Is Inherently Insecure, Your Emails Are Likely Compromised

  Something like a browser extension for this does already exist, fortunately: https://github.com/tasn/webext-signed-pages. - Source: Hacker News / over 2 years ago

Ghost mentions (175)

• Redirect YAML From Ghost Data Using JQ

  Quick aside: To go over how to find the redirect section through the Ghost interface you can check out my earlier post in this series How to Find the Redirect Section on Your Ghost Account. After this one I'll share an alternative way to do this. If you are looking for my original full post you can check out Oh No, I Need to Create Redirect Text for All My Posts!. - Source: dev.to / about 2 months ago

• Setting up a www subdomain on a self-hosted Ghost blog

  Ghost CMS makes it fairly easy to link your blog to your own domain and set up SSL. The ghost setup command in ghost-cli basically does it for you. However, for me it didn't automatically set up a www subdomain. So I could access, say, https://https://myblog.lol, but https://www.myblog.lol would result in a 502. I was thinking of just adding a CNAME or ALIAS record in my providers DNS settings, but that didn't... - Source: dev.to / about 1 month ago

• Proton and Standard Notes are joining forces

  Diversifying a lot. Next acquisition will be Ghost(https://ghost.org/) I bet. Similar DNA, fits in the portfolio (If they are trying to match the feature set of Google) and have no VC backing. - Source: Hacker News / 2 months ago

• Why I Care Deeply About Web Accessibility And You Should Too

  For example, if you are in a country where you can accept Stripe and are publishing a newsletter through, Substack or using the Ghost platform, enabling the ability to accept payments is a few clicks away. For those who cannot accept payment with Stripe, well, you are up the creek without a paddle. I do not know about you, but I see that as a barrier to access. - Source: dev.to / 3 months ago

• Faster Blogging: A Developer's Dream Setup

  Glee our dev friendly blogging setup has been undergoing a huge transformation for the last few weeks. For those who don't know, glee is a simple open source CLI tool that converts markdown posts into ghost blog posts. Check out the glee demo video when you have a moment! Glee: Dev-friendly Blogging Setup. - Source: dev.to / 4 months ago