Kooda Loutre is a user on loutre.info. You can follow them or interact with them if you have an account anywhere in the fediverse.
Kooda Loutre @Kooda

I love and I have quite a few projects I want to make that are using it (some listed on gopher://upyum.com already) and some I’ve already started, like an rss2email-like software ( upyum.com/cgit.cgi/pheeds/ ) and a viewer ( upyum.com/cgit.cgi/gopher-git/ )…

But I’m always a tiny bit uncomfortable when browsing the gopher-space, given that nothing is encrypted…

· Web · 0 · 3

@Kooda That's why you offer it as a tor hidden service!

The problem then becomes the linking to other servers… But the same kind of problem arises when you try to slap TLS on top of gopher…

@marsxyz if there is, I’m not aware of it, and most clients probably don’t support it.

@marsxyz @Kooda Not yet. I have a test server running under TLS (though no clients directly support this, as far as I have been able to tell), and as @ckeen notes, routing via tor is an option.

@crc @marsxyz @ckeen I think we need a way to make this discoverable. So that clients that support encryption can connect to the secure variant even if the link to the server was a regular one. And something similar to HSTS.

@Kooda @crc @marsxyz The point of hidden services is that it is *not* discoverable though.

There's no need to offer an insecure variant at all?

@ckeen @crc @marsxyz Sure, but you lose the point of gopher, which was inter-instance linking… You could just use FTP if you don’t need that.

@ckeen @crc @marsxyz Because most of the gopher-space is not on Tor? :Þ

@Kooda @crc @marsxyz
Nothing prevents you to link to non tor selectors and vice versa...

@Kooda @crc @marsxyz

That's the same argument not to use https because you might link to other websites using https...