• 0 Posts
  • 56 Comments
Joined 1 year ago
cake
Cake day: July 15th, 2023

help-circle





  • I’m not sure how true this perception is in more recent years. Many popular sites, with enormous traffic volumes that could drive digital impression ad revenue, are instead pushing subscriptions or other monetization models.

    For instance, the New York Times makes — by far — more money on digital subscriptions than digital advertising. Digital advertising revenues are also declining for them.

    Another example is Spotify, where ad revenue from their ad-supported tier did not cover their operational costs and now represents around only a tenth of their revenue compared to subscriptions.

    The exceptions to this are generally search and social media sites, where the product for sale on these sites are the users themselves. They’re just advertising platforms, which of course make their money from digital advertising.

    So I’d say one issue with digital advertising is that it often does not pay the bills for the site owner. Its value is tied to its ability to convert visitors to buyers, but it has to be ramped up to such an extreme level it instead only creates bad experiences.




  • JSON Problem Details

    https://datatracker.ietf.org/doc/html/rfc9457

    • It has a specification, so a consumer of the API can immediately know what to expect.
    • It has a content type, so a client sdk can intelligently handle the response.
    • It supports commonly needed members which are a superset of all of the above JSON examples, including type for code and repeating the http status code in the body if desired.
    • It is extensible if needed.
    • It has been defined since at least 2016.

    This specification’s aim is to define common error formats for applications that need one so that they aren’t required to define their own …

    So why aren’t you using problem details?











  • As others have mentioned, a trusted 3rd party signs the correct key so your browser can check the key itself.

    However, it should also be noted that your browser must have a list of trusted 3rd parties and their certificates used for signing in order to perform this check. It’s entirely possible to modify this list yourself. Some examples include:

    • executing your own MITM style “*attack” in order to intercept and analyze local https traffic
    • corporate network inspection and monitoring, where a gateway does the above for all devices on the network which have a CA cert pre-installed through some policy

    So while it’s possible for trusted 3rd parties to issue valid certificates to bad actors, it’s also possible to add anyone (you, your employer, or some bad actors) to the trusted parties list.


  • That may be, but I’m not sure that’s a problem for a communication platform. I remember one time when they moved the share screen button around and some less tech savvy users thought the feature was removed!

    Teams has something like chat threads too. E.g. you can reply to a message in a channel and it groups all replies, and you can also focus that thread if you want. But I agree it isn’t hidden “off the main topic” quite like slack threads.