Skip to main content

We Have To Trust Blogger

A long time ago, if we were setting up trusted hosts, in a browser trust list, we would add "www.blogger.com" to the list. The "www" alias is what would be used by any web services in our browsers.

Then Blogger rolled out New Blogger, and started using "www2.blogger.com" to separate migrated blogs from unmigrated ones. And a lot of Bloggers lost the ability to maintain their blogs, because their browsers were setup to trust "www.blogger.com".

Just recently, when Old Blogger was decommissioned, some ISPs providing access to Blogger as "www.blogger.com" again found their customers unable to maintain their blogs.

Similarly, we have to trust all Blogger content. Some security filters examine each script, one by one, to decide if it is safe to allow on the computer. If Blogger scripts have to be examined, one by one, before being allowed to run, what happens to the programs that are waiting for the scripts to run?

The Blogger dashboard involves hundreds of scripts. Some Firefox users are seeing "WARNING UNRESPONSIVE SCRIPT", because some security programs protect, by examining each script, one by one, to determine if it is safe.

Either Blogger is safe, or it is not safe - but it needs to be considered safe, on a domain basis. Not one script, at a time.
Heuristic Detection is an effective way to locate unknown threats for the most up-to-date realtime protection, but there are downsides.
Obviously this sort of scanning and analysis can take some time, which may slow-down system performance.

If we're going to trust Blogger, we're going to have to trust all content, from "*.blogger.com", or simply "blogger.com". Not "www.blogger.com" - and not by scanning content. We have to be prepared for Blogger to expand use of the "blogger.com" domain, not restrict themselves to "www*.blogger.com".

>> Top

Comments

Popular posts from this blog

What's The URL Of My Blog?

We see the plea for help, periodically I need the URL of my blog, so I can give it to my friends. Help! Who's buried in Grant's Tomb, after all? No Chuck, be polite. OK, OK. The title of this blog is "The Real Blogger Status", and the title of this post is "What's The URL Of My Blog?".

Leave Comments Here

Like any blogger, I appreciate polite comments, when they are relevant to the blog, and posted to the relevant article in the right blog . If you want to ask me a question thats relevant to blogging, but you can't find the right post to start with (I haven't written about everything blogger related, yet, nor the way things are going I don't expect to either), ask your questions here, or leave an entry in my guestbook . As noted above, please note my commenting policy . If you post a comment to this post , I will probably treat it as a "Contact Me" post . If you have an issue that's relevant to any technical issue in the blog, please leave a comment on the specific post , not here. This post is for general comments, and for non posted contact to me. If the form below does not work for you, check your third party cookies setting! For actual technical issues, note that peer support in Blogger Help Forum: Something Is Broken , or Nitecruzr Dot Net - Blog

What Is "ghs.google.com" vs. "ghs.googlehosted.com"?

With Google Domains registered custom domains becoming more normal, we are seeing one odd attention to detail, expressed as confusion in Blogger Help Forum: Learn More About Blogger . My website uses "ghs.google.com" - am I supposed to use "ghs.googlehosted.com", instead? It's good to be attentive to detail, particularly with custom domain publishing . This is one detail that may not require immediate attention, however.