M contents/subweb.md → contents/subweb.md

@@ -4,13 +4,13 @@ home: /subweb/
 sourcehut: subweb
 title: SubWeb
 subtitle: "A Safe, Small, Simple, Subset of the Web"
-summmary: "A safe, small, simple subset of of the World Wide Web aiming at improving privacy, security, compatibility and simplicity of web pages."
+summmary: "A safe, small, simple subset of of the Web aiming at improving security, compatibility and simplicity of web pages."
 content-type: project
 conver: true
 active: true 
 changelog: true
 stage: prototype
-version: 100-F
+version: 140-3
 license: CC-BY-4.0
 -----
 
@@ -66,8 +66,12 @@ - No JavaScript or scripts of any kind
 - No WASM, applets, objects or similar technologies.
 - No framesets or iframes
 - All assets (styles and images, essentially) must be loaded from the same origin as the SubWeb site.
-- Inline styles or images mixed-in with HTML are not permitted.
-- Mandatory HTTPS as transport, if your site has forms used to submit data.
+- HTTPS is recommended, and pages should be served via HTTPS if they contain forms that submit sensitive data, they distribute software or other material that should be downloaded from a safe and known web site.
+
+Also, inline styles (using the style tag or attribute) or images mixed-in with HTML (e.g. using the `data:` pseudo-protocol) are permitted but somewhat discouraged because:
+
+- they increase the damage that can be done by attackers via HTML injections
+- they make the source of HTML documents less readable
 
 #### Compatibility
 
@@ -119,6 +123,19 @@ 
 Although not processed by Dillo (and pointless, in that context, as it only works on desktop operating systems), it does not alter its rendering of the page but it does make an enormous difference for mobile support.
 
 A not-so-clear-cut case is the `border-radius` CSS property, because it _does_ alter the visual appearance of elements on the page if not supported, and may cause web sites to look very different in such cases.
+
+### Linking to External Content
+
+When linking to external content using the `a` tag, a `rel` attribute should be added to provide a hint about the destination of the link, in terms of the content it serves, for example:
+
+- **subweb**, if the destination site conforms to the SubWeb specifications.
+- **smolweb**, if the destination site conforms to the Smolweb specification.
+- **fullweb**, in other cases.
+
+Of course this is just a hint and based on the linker's own knowledge about the destination site, and by no means provides any guarantee; however, it can be useful to improve the overall user experience, especially if:
+
+- Different links are styled accordingly
+- Browsers themselves start providing default styles or hints
 
 ### Specifications