The internet is becoming a more dangerous place, and fast. LLMs are only getting better at identifying security issues, and more people are taking advantage of this. Some people argue that LLMs will eventually make large-scale vulnerabilities a thing of the past. I’m not so sure. Either way, I think it’s a good idea to have less stuff that can be hacked online. One way to do that is with statically generated sites.
Key word here being a static site.
Static sites with things like CGI “endpoints” were a thing back in the day. There’s no need for URLs to have a 1:1 mapping to the filesystem, you can have a half static and half dynamic site if needed.
Yeah, but then it’s not static anymore. Your hosting options change, your threat model changes, it’s a whole different game.
I’ve been thinking about this, and I do think it’s a great form of degradation. I would love to see more sites that are statically rendered, but under load dynamic features are removed.