TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Show HN: Dotplan Online

23 pointsby Rudismover 3 years ago

1 comment

chrismorganover 3 years ago
If a given server doesn’t have a SRV record instructing where to look, I take it it just queries that domain directly. If so, putting the API at &#x2F;plan&#x2F; is problematic, because in situations where user content is hosted from a domain it can allow any user to control the appearance of the domain by hosting certain stuff under &#x2F;plan&#x2F;, and also various domains will already be using &#x2F;plan&#x2F; for something else.<p>The solution for this is well-known URIs &lt;<a href="https:&#x2F;&#x2F;www.rfc-editor.org&#x2F;rfc&#x2F;rfc8615.html" rel="nofollow">https:&#x2F;&#x2F;www.rfc-editor.org&#x2F;rfc&#x2F;rfc8615.html</a>&gt;: put it under &#x2F;.well-known&#x2F;, where all such hosting providers should know not to allow users to place files.<p>So perhaps &#x2F;.well-known&#x2F;plan&#x2F; or &#x2F;.well-known&#x2F;dotplan&#x2F;. And if you’re serious about this project, once you’ve got the basics ironed out and specified in detail, and probably some degree of interest from others, request registration in the register &lt;<a href="https:&#x2F;&#x2F;github.com&#x2F;protocol-registries&#x2F;well-known-uris" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;protocol-registries&#x2F;well-known-uris</a>&gt;.
评论 #28352599 未加载