Post

A lot of smart people seem to be betting on Electron instead of Tauri. Beyond chrome devtools availability and simpler cross-platform testing (which are huge reasons) why pick Electron? I do like that Tauri has an opinionated bundling and OTA update solution. Electron is DIY

Yeah, the cross platform chaos of details is really not good. It gets worse the deeper I look into it (being restricted to least-common-denominator things really hurts at deep levels). I've been looking pretty intensely into "what if electron but better" lately and IMO it's CEF or Servo at bottom.

Tauri also has far too much minimum-viable boilerplate for me. As well as minimum-viable exposure to Rust and its toolchain hell(s). Both the mvb rust and the capabilities.json file are somewhere between 🤔 and 🫢🤢😑 imho. They're just... A lot. For little, if any, value.

I've definitely felt this pain trying to hunt down capability flags. Docs aren't clear either

0 reposts0 likes

I don't love that it's just Yet Another place for (nonprogrammatic? Why??) config to fester, yeah. But also looking at some of them -- esp. the examples for the shell plugin -- almost made me turn into the Joker. It's just patiently obvious that it's all security theater only with no real basis.

Like... Peep this example. The shell plugin gives you ways to... filter exec arguments by... Regexp. Ok, lol. ...first example is literally "bash -c" llololololl OKAY

On the one hand, "that's just a bad example": well, sure. On the other hand: it makes it crystal clear that this so-called-"capabilities" system is entirely just regular ol' config values, entirely parsed and interpreted by the plugin. At which point... I don't understand what Tauri is aiming at?

Why is there this whole heap of mandatory boilerplate, when it's going to be such a pile of nothingburger? Why is it billed as a security mechanism when the examples make it clear that it's emphatically not? The whole thing is just so baroque and mismarketed it makes me wonder what else is, too 😔.