Privacy

37198 readers

150 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

[email protected]

Does using Cloudflare's cdnjs compromise privacy? (lemmy.ml)

submitted 1 day ago* (last edited 1 day ago) by [email protected] to c/[email protected]

15 comments fedilink hide all child comments

Prefacing by saying I'm a total noob to webdev.

I'm trying to move my personal portfolio site off of Squarespace and onto some sort of static hosting. Since I know nothing, I'm cobbling together hugo templates and using LightBox2 to show image galleries. The blog I'm referencing includes LightBox2 using this:

<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js" integrity="sha256-CSXorXvZcTkaix6Yvo6HppcZGetbYMGWSFlBw8HfCJo=" crossorigin="anonymous"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/lightbox2/2.11.1/js/lightbox.min.js" integrity="sha256-CtKylYan+AJuoH8jrMht1+1PMhMqrKnB8K5g012WN5I=" crossorigin="anonymous"></script>

I would prefer to not subject people viewing my page to any external tracking if I can avoid it. My page has zero tracking/analytics for this reason. I briefly tried downloading LightBox2 and directly including it instead, and was able to get it working mostly, but some things were broken that I would need to debug. Before I do that I was wondering, is this even a problem? Is including stuff from cloudflare cdn like this sketchy? It's possible I'm being overly paranoid but I have no idea.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 4 points 1 day ago* (last edited 1 day ago) (2 children)

Might I recommend github pages? Should be able to host all needed dependencies there too.

https://pages.github.com/

PS - jerboa android client didn't show your markup, may I also suggest using 3x backticks to make it formatted as you expected? Like so:

<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/lightbox2/2.11.1/css/lightbox.min.css" integrity="sha256-tBxlolRHP9uMsEFKVk+hk//ekOlXOixLKvye5W2WR5c=" crossorigin="anonymous" />
<script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js" integrity="sha256-CSXorXvZcTkaix6Yvo6HppcZGetbYMGWSFlBw8HfCJo=" crossorigin="anonymous"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/lightbox2/2.11.1/js/lightbox.min.js" integrity="sha256-CtKylYan+AJuoH8jrMht1+1PMhMqrKnB8K5g012WN5I=" crossorigin="anonymous"></script>

[–] [email protected] 4 points 1 day ago (1 children)

I would recommend gitlab pages over github pages. Github is owned by Microsoft so who knows how private it is anymore.

[–] [email protected] 1 points 1 day ago

Yea, that's smarter. I didn't know they had that as well, but in hindsight it makes sense

[–] [email protected] 5 points 1 day ago (1 children)

Thanks fixed. Interesting jerboa and the web version of lemmy are developed by the same person but using the "code" button in the web frontend only uses one backtick. That might be worth a bug report.

I'm actually trying to get away from github also, so maybe codeberg pages instead? This is a part of the process I haven't done enough research into, I wanted to get the static site working locally first then "shop around" for hosts.

[–] [email protected] 2 points 1 day ago

There's a few issues with jerboa that I'd like addressed, maybe I'll look into building it and issuing some PRs for it when I have more time. Can't imagine it's easy to maintain such a code base alone.

Few things off the top of my head are keyboard hides text with long comments, and sharing links for federated communities gives a link to the instance it was posted on and not the instance I'm on.

Also not being able to make communities in jerboa is a bit of a bummer, should also be easier to subscribe to communities on other instances too (web client).