Jarred Sumner

I love and agree with this post and have signed up for codeblog. THAT SAID, an important reason for the Death Of Cool Websites In Other People’s Websites is the trust model is wrong. If mere content authors can get a reader’s session token / silently act on their behalf then

I agree with this 100% — there will be some separation between authoring and reading, to make it difficult/impossible to extract session tokens. It gets even scarier with comments. Lots of stuff to figure out.

Oh yeah, with all the work around sandboxing that’s been done for web components I imagine codeblog can be made pretty secure on that front. Presenting a fake login box ototh is a bit trickier; could use the “have a user set a custom challenge text” pattern

ShadowDOM is "easy" to break out of IIUC. I suspect comments will have to be sandbox'd iframes that can't modify outside the bounds of the iframe...just hoping it can be a single comments iframe instead of individual iframe for each comment.

Would still need the iframe to have a different origin than the current host also it'll be React. React is much easier to use than Web Components and has a bigger community.

it'll probably also need some sort of shared module resolver because otherwise it'll have to load like 10 different copies of React and other shared dependencies...which would be sad (even with some sort of "build-time" pre-rendering like what Next.js does)

I'm probably going to write something up more formal about all this -- I think there's a way to push hard on the open-source model here that can make it a product with more potential