Live data from Hacker News

Decentraleyes – Local CDN Emulation

decentraleyes.org

51–60 of 84 posts

Re: Decentraleyes – Local CDN Emulation

#51
post #50
post #26

I like the idea of the extension, but the implementation in lacking. According to the project's gitlab[1], there's only a dozen or so libraries are actually being served. It doesn't seem to cache google web fonts, for instance. Some sibling comments mentioned LocalCDN, which has more libraries and also includes fontawesome, but still lacks google fonts. [1] https://git.synz.io/Synzvato/decentraleyes/-/tree/master/res…

We should all be turning off web fonts anyway.

Citation needed?

Re: Decentraleyes – Local CDN Emulation

#52
post #26

I like the idea of the extension, but the implementation in lacking. According to the project's gitlab[1], there's only a dozen or so libraries are actually being served. It doesn't seem to cache google web fonts, for instance. Some sibling comments mentioned LocalCDN, which has more libraries and also includes fontawesome, but still lacks google fonts. [1] https://git.synz.io/Synzvato/decentraleyes/-/tree/master/res…

I feel like that's a little unfair; it's a first step, an MVP, no?

Re: Decentraleyes – Local CDN Emulation

#54
post #43

Earlier quoted context omitted.

> "even if just for performance reasons" I don't think it matters for performance because it's cached in the browser anyway... So the purpose of the extension is privacy.

I may be wrong, but I don't think the browser caches CDN requests, at least per site... So this might be a performance gain too https://stackoverflow.com/questions/29704811/why-isnt-the-br...

The answer at that Stack Overflow question is seriously incomplete (and even it doesn’t say there’s no cache). Browsers today will, for the most part, cache CDN responses, not need to revalidate them, and share that cache across sites (though I think first-party isolation changes that to a per-site cache).

Re: Decentraleyes – Local CDN Emulation

#55
post #26

I like the idea of the extension, but the implementation in lacking. According to the project's gitlab[1], there's only a dozen or so libraries are actually being served. It doesn't seem to cache google web fonts, for instance. Some sibling comments mentioned LocalCDN, which has more libraries and also includes fontawesome, but still lacks google fonts. [1] https://git.synz.io/Synzvato/decentraleyes/-/tree/master/res…

I feel like that's a little unfair; it's a first step, an MVP, no?

According to archive.org, it's been around for at least 6 years https://web.archive.org/web/20151204211651/https://addons.mo.... This is well past the time when you can use the "it's an MVP" excuse.

Re: Decentraleyes – Local CDN Emulation

#56
post #26

I like the idea of the extension, but the implementation in lacking. According to the project's gitlab[1], there's only a dozen or so libraries are actually being served. It doesn't seem to cache google web fonts, for instance. Some sibling comments mentioned LocalCDN, which has more libraries and also includes fontawesome, but still lacks google fonts. [1] https://git.synz.io/Synzvato/decentraleyes/-/tree/master/res…

I feel like that's a little unfair; it's a first step, an MVP, no?

The extension is at least 3 years old (by the oldest review comment, I also remember trying it around 2 years ago) and has 130k installs. It's a little beyond an MVP. I guess they don't do telemetry (oh the irony) so they don't have a way to know which files are most reused across CDNs.

Re: Decentraleyes – Local CDN Emulation

#58

Note that Decentraleyes appears to break some sites due to CSP and SRI issues. I uninstalled it months/years ago, but forgot which sites broke. The bug tracker link is at https://git.synz.io/Synzvato/decentraleyes/-/issues/16 .

According to their whitelist[1], cdnjs.com, dropbox.com, glowing-bear.org, minigames.mail.ru, report-uri.io, scotthelme.co.uk, securityheaders.io, stefansundin.github.io, udacity.com, yadi.sk, and yourvotematters.co.uk are known to have issues. For as long as I can remeber, you can also whitelist sites yourself.

[1]https://git.synz.io/Synzvato/decentraleyes/blob/b3931febc234...

Re: Decentraleyes – Local CDN Emulation

#59

Earlier quoted context omitted.

Citation needed?

Let’s say 80% of websites load Google Fonts. Now Google knows 80% of your browsing history.

Wikimedia is hosting some now to help alleviate this: https://news.ycombinator.com/item?id=23776786

Re: Decentraleyes – Local CDN Emulation

#60

Note that Decentraleyes appears to break some sites due to CSP and SRI issues. I uninstalled it months/years ago, but forgot which sites broke. The bug tracker link is at https://git.synz.io/Synzvato/decentraleyes/-/issues/16 .

Couldn’t the browser extensions modify response headers and HTML attributes to avoid CSP and SRI issues?
Post reply on HN