85 karma · joined January 1, 2022
There's something to be said about compression algorithms being predictable, deterministic, and only capable of introducing defects that stand out as compression artifacts.
Plus, decoding performance and power consumption matters, especially on mobile devices (which also happens be the setting where bandwidth gains are most meaningful).
There is definitely some bias in the availability of data, but it was comparatively harder to end up in a hyperinflationary spiral in the era of commodity or representative currencies, and these were commonplace until the twentieth century.
There were instances of money suddenly losing all value due to the failure of the issuing state (e.g., confederate dollar banknotes), but that's probably a different story.
Per Wikipedia: "The final redenomination produced the "fourth dollar" (ZWL), which was worth 10^25 ZWD (first dollars)."
The ZWL itself was subsequently largely abandoned, too. I believe you'd have more luck transacting in foreign currencies.
I suspect that would be the reality with a lot of the proposed mandatory labeling for electronics, too.
Also, the likelihood that a candidate will be informed of any non-public plans to sell the company are slim...
"We" who? Application owners want that, browser vendors want that (their greatest fear is that mobile will eat the web, so they don't want to make the platform less flexible)... and users generally don't mind.
> impossible for servers to know my password, hence impossible passwords leaks
That would require deeper architectural changes to HTTP auth, but is probably a reasonable goal. That said, it's more readily approximated with unique passwords + having a good password manager. The main risk of password leaks is not that they make that particular breach worse (since the attackers can just grab your data), but that passwords are reused too often.
Federated login is another approximation, where the password is only known to your identity provider, not to every identity consumer. It's modestly successful for some lower-value services.
Admittedly, there are some simple use cases where HTTP auth is all you need, but it's just way too inflexible, unless you turn it into some mammoth spec that is never going to be as flexible and tempting as managing user identity yourself.
Especially since HTTP auth doesn't actually mean you can stop doing that anyway. You're still handling account creation, password checking, all the abuse / bot detection bits... all you're getting rid of is the sign-on and logout functionality, which is really not that complicated to begin with.