Re: New iteration on the Emacs homepage

Re: New iteration on the Emacs homepage

[Yoni Rabkin]

The new emacs site at www.gnu.org/software/emacs links to
emacsrocks.com. But emacsrocks.com has non-free javascript on it in the
form of Google Analytics.

From the source of emacsrocks.com:

"""
(function() {
  var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
  ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
  var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
})();
"""

This is a problem. Either emacsrocks.com needs to stop using non-free
JS, or the FSF should remove that link.

-- 
   "Cut your own wood and it will warm you twice"

Re: New iteration on the Emacs homepage

[Nicolas Petton]

[-- Attachment #1: Type: text/plain, Size: 274 bytes --]

Yoni Rabkin <yoni@rabkins.net> writes:

> The new emacs site at www.gnu.org/software/emacs links to
> emacsrocks.com. But emacsrocks.com has non-free javascript on it in the
> form of Google Analytics.
>
> From the source of emacsrocks.com:

It has just been removed.

Nico

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 512 bytes --]

Re: New iteration on the Emacs homepage

[Yoni Rabkin]

Nicolas Petton <nicolas@petton.fr> writes:

> Yoni Rabkin <yoni@rabkins.net> writes:
>
>> The new emacs site at www.gnu.org/software/emacs links to
>> emacsrocks.com. But emacsrocks.com has non-free javascript on it in the
>> form of Google Analytics.
>>
>> From the source of emacsrocks.com:
>
> It has just been removed.

Thank you for the extremely prompt action and reply.

-- 
   "Cut your own wood and it will warm you twice"

Re: New iteration on the Emacs homepage

[Yoni Rabkin]

Nicolas Petton <nicolas@petton.fr> writes:

> Yoni Rabkin <yoni@rabkins.net> writes:
>
>> The new emacs site at www.gnu.org/software/emacs links to
>> emacsrocks.com. But emacsrocks.com has non-free javascript on it in the
>> form of Google Analytics.
>>
>> From the source of emacsrocks.com:
>
> It has just been removed.

As long as we are on this topic, someone has just pointed out to me (on
#fsf IRC) that the CSS files are being served from third-party servers,
namely:

https://code.cdn.mozilla.net/fonts/fira.css
https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css

I feel like it would be better if those CSS files would be served from
fsf-controlled URLs like static.fsf.org, so that the FSF has control
over them.

This would have the additional benefit of not leaking information about
anyone visiting fsf.org to third-parties.

-- 
   "Cut your own wood and it will warm you twice"

Re: New iteration on the Emacs homepage

[Nicolas Petton]

[-- Attachment #1: Type: text/plain, Size: 767 bytes --]

Yoni Rabkin <yoni@rabkins.net> writes:

> As long as we are on this topic, someone has just pointed out to me (on
> #fsf IRC) that the CSS files are being served from third-party servers,
> namely:
>
> https://code.cdn.mozilla.net/fonts/fira.css
> https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css

I removed the second one (it was unused).

> I feel like it would be better if those CSS files would be served from
> fsf-controlled URLs like static.fsf.org, so that the FSF has control
> over them.

I can do that.

> This would have the additional benefit of not leaking information about
> anyone visiting fsf.org to third-parties.

But it has a cost too: it won't be served by the Mozilla CDN, and we'll
have to maintain this file.

Nico

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 512 bytes --]

Re: New iteration on the Emacs homepage

[Yoni Rabkin]

Nicolas Petton <nicolas@petton.fr> writes:

> Yoni Rabkin <yoni@rabkins.net> writes:
>
>> As long as we are on this topic, someone has just pointed out to me (on
>> #fsf IRC) that the CSS files are being served from third-party servers,
>> namely:
>>
>> https://code.cdn.mozilla.net/fonts/fira.css
>> https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
>
> I removed the second one (it was unused).
>
>> I feel like it would be better if those CSS files would be served from
>> fsf-controlled URLs like static.fsf.org, so that the FSF has control
>> over them.
>
> I can do that.
>
>> This would have the additional benefit of not leaking information about
>> anyone visiting fsf.org to third-parties.
>
> But it has a cost too: it won't be served by the Mozilla CDN, and
> we'll have to maintain this file.

The marginal cost of maintaining one extra file when the FSF is already
maintaining such a large website is well... marginal.

But it's a matter of policy. The real question is whether the FSF are ok
with it on principle.


-- 
   "Cut your own wood and it will warm you twice"

Re: New iteration on the Emacs homepage

[Richard Stallman]

[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

  > > This would have the additional benefit of not leaking information about
  > > anyone visiting fsf.org to third-parties.

  > But it has a cost too: it won't be served by the Mozilla CDN, and we'll
  > have to maintain this file.

That's a secondary issue.  Autonomy of our site is more important.

-- 
Dr Richard Stallman
President, Free Software Foundation (gnu.org, fsf.org)
Internet Hall-of-Famer (internethalloffame.org)
Skype: No way! See stallman.org/skype.html.

Re: New iteration on the Emacs homepage

[Nicolas Petton]

[-- Attachment #1: Type: text/plain, Size: 630 bytes --]

Richard Stallman <rms@gnu.org> writes:

> [[[ To any NSA and FBI agents reading my email: please consider    ]]]
> [[[ whether defending the US Constitution against all enemies,     ]]]
> [[[ foreign or domestic, requires you to follow Snowden's example. ]]]
>
>   > > This would have the additional benefit of not leaking information about
>   > > anyone visiting fsf.org to third-parties.
>
>   > But it has a cost too: it won't be served by the Mozilla CDN, and we'll
>   > have to maintain this file.
>
> That's a secondary issue.  Autonomy of our site is more important.

I will change the CSS file to be served by us.

Nico

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 512 bytes --]

Re: New iteration on the Emacs homepage

[Yoni Rabkin]

Nicolas Petton <nicolas@petton.fr> writes:

> Richard Stallman <rms@gnu.org> writes:
>
>> [[[ To any NSA and FBI agents reading my email: please consider    ]]]
>> [[[ whether defending the US Constitution against all enemies,     ]]]
>> [[[ foreign or domestic, requires you to follow Snowden's example. ]]]
>>
>>   > > This would have the additional benefit of not leaking information about
>>   > > anyone visiting fsf.org to third-parties.
>>
>>   > But it has a cost too: it won't be served by the Mozilla CDN, and we'll
>>   > have to maintain this file.
>>
>> That's a secondary issue.  Autonomy of our site is more important.
>
> I will change the CSS file to be served by us.

As of this morning, the CSS files are still being served by
code.cdn.mozilla.net. I'll check again in about a week.

No judgment though; I just want to make sure that this doesn't fall
between the cracks.

-- 
   "Cut your own wood and it will warm you twice"

Re: New iteration on the Emacs homepage

[Nicolas Petton]

[-- Attachment #1: Type: text/plain, Size: 248 bytes --]

Yoni Rabkin <yoni@rabkins.net> writes:

> As of this morning, the CSS files are still being served by
> code.cdn.mozilla.net. I'll check again in about a week.

I'm making various improvements, and this is in my list, but things take
time :)

Nico

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 512 bytes --]

bug#23152: New iteration on the Emacs homepage

[Richard Stallman]

[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

  > I feel like it would be better if those CSS files would be served from
  > fsf-controlled URLs like static.fsf.org, so that the FSF has control
  > over them.

Absolutely!

  > This would have the additional benefit of not leaking information about
  > anyone visiting fsf.org to third-parties.

Yes -- even more important.

-- 
Dr Richard Stallman
President, Free Software Foundation (gnu.org, fsf.org)
Internet Hall-of-Famer (internethalloffame.org)
Skype: No way! See stallman.org/skype.html.

Re: New iteration on the Emacs homepage

[Richard Stallman]

[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

Our policy is that it is ok to link to a site that has some nonfree
Javascript code, as long as the page works even if the visitor blocks
execution of that code.  Not executing the Google Analytics code
won't make anything important fail, so ignore that please.

-- 
Dr Richard Stallman
President, Free Software Foundation (gnu.org, fsf.org)
Internet Hall-of-Famer (internethalloffame.org)
Skype: No way! See stallman.org/skype.html.