# Gemini is Superior to a Web Subset ## Gemini exists. A safe-web subset is only an idea. (created Sun, Feb 21, 2021) ### SmallWeb, SafeWeb, SubsetWeb Some ideas and thoughts by others about a web subset: => http://blog.danieljanus.pl/2019/10/07/web-of-documents/ Excerpts: > We don't have a Web of Documents anymore. These days, the WWW is mostly a Web of Applications. An application is a broader concept: it can display text or images, but also lets you interact not just with itself, but with the world at large. And that's all well and good, as long as you consciously intend these interactions to happen. > ... the more I think about it, the more sense it makes to me to attack the problem closer to its root: to decomplect the notions of a document and an application; to keep the Web of Applications as it is, and to recreate a Web of Documents--either parallel to it, or as its sub-web. > To do this, we need to take a step back. (Or do a clean start and invent a whole new technology, but this is unlikely to succeed). Fortunately, we don't have to travel all the way back to 1992, when the WWW was still a Web of Documents. > I think we can base the new Web of Documents on ol' trusty HTTP (or, better, HTTPS), HTML and CSS as we know them today, with just three restraints: > 1. No methods other than GET (and perhaps HEAD). POST, PUT, DELETE and friends just have no place in a world of documents. They are not idempotent; they potentially modify the state of the world, which documents should not be able to do. (I was also thinking "no forms", but with #1 in place, it seems like an unnecessary refinement. After all, forms that translate to GET requests just facilitate creating URLs: a user could just as well have typed the resulting URL by hand.) > 2. No scripts of any kind. Not JavaScript, not WebAssembly. Not even to enrich a document, such as syntax-highlight the code snippets. This one may seem too stringent, but I think it's better to err on the safe side, and it's very easy to enforce. > 3. No cookies. Cookies by themselves aren't interactive, but having them makes it all too easy to abuse the semantics of HTTP to recreate sessions, and on top of them reinvent the app-wheel and eventually forfeit the Web of Documents again. > How do we achieve this? I don't know, really. I don't have a concrete proposal. Perhaps we could have dedicated browsers for the WoD; perhaps we could make existing browsers prominently advertise to the user whether they are browsing a document or an application. On top of all the technical decisions to make, there'll be significant campaigning and lobbying needed if the idea is ever to take off. The author, Daniel, did not advocate for HTML4, CSS2, nor HTTP 0.9. He wants HTTPS and at least some of today's HTML5 and CSS3 features. ========== solderpunk launched Gemini in June 2019, but he has expressed his thoughts about a SafeWeb or SmallWeb subset. This is his web server to support his idea of a SafeWeb. => https://tildegit.org/solderpunk/shizaru/ > Shizaru is a minimalistic web server whose guiding principle is "serve no evil". Precisely what counts as "evil" can be configured by the user, so perhaps Shizaru is best explained as a webserver for imposing strong opinions. > The website obesity crisis is combatted with strict file size limits, to ensure that your website does not end up larger than the major works of Russian literature. Besides being limited to 32 KiB in size, HTML pages are limited to 3 images and HTML tags cannot be nested more than 10 levels deep. This encourages uncluttered and quickly rendering layouts.