Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bunny fonts – privacy respecting drop-in replacement for Google Fonts

fonts.bunny.net

Post reply on HN
Print view View original

111–120 of 346 posts

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#111

Post by marcosdumay »

shrimp_emoji wrote: post #63
fritigern wrote: post #53

Earlier quoted context omitted.

> we're in a country with better privacy laws Speaking as a European: I think this is a very important topic for us. I don't think Americans and American companies understand how little trust rest of us have for the American government. Working with a company that is not subject to the whims of the American government is a huge privacy win. If a company pitches me a product, they start 1 points ahead if they are base…

I always had the suspicion that the (seemingly higher) interest in privacy/FOSS in Europeans is fueled partly by anti-Americanism. In America, even if you don't trust the government, at least it's your government, so I don't feel like that plays as big a role, and any interest in privacy/FOSS (like mine) is untempered by the anxiety of an alien government's interference. :p Regardless, I love how much more Europeans…

> at least it's your government

What? Your government is the worst one to go not respecting your rights.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#112

Post by chipotle_coyote »

_fat_santa wrote: post #60
favourable wrote: post #50

This is a great project, but I learned to use a system font stack[0] instead to address latency issues on my sites. I run an e-commerce site and every millisecond in rendering time is potentially a lost sale. It needs to be fast, especially for those on 3G (or 2G?) connections. [0] https://systemfontstack.com/

I have a question about system fonts. Whenever I declare system fonts I always use: `serif`, `sans-serif`, or `monospaced` rather than the actual fonts like: ``` font-family: -apple-system, BlinkMacSystemFont, avenir next, avenir, segoe ui, helvetica neue, helvetica, Cantarell, Ubuntu, roboto, noto, arial, sans-serif; ``` Am I doing it wrong by declaring it just like `font-family: sans-serif`?

The system font stacks are trying to target the fonts that the operating system uses by default (e.g., using San Francisco as the sans serif font on a Mac). If you just use "serif", "sans-serif", and "monospaced", you're targeting the fonts that the browser uses by default, which probably aren't the same fonts.

So, you're "doing it wrong" in the sense that you're not actually doing the same thing, but you're not wrong in some kind of cosmic sense. :)

(This does make me wonder for the first time why, when system font stacks started to become popular, browsers didn't just make the system fonts the defaults, though. Sure, it would mean that web pages that only specified "sans-serif" would change appearance between the old and new browser versions, but if they only specified "sans-serif" they were declaring "I don't care what font you give me as long as it's sans serif" anyway.)

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#113

Post by misslibby »

fritigern wrote: post #53
hannob wrote: post #31

I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…

> we're in a country with better privacy laws Speaking as a European: I think this is a very important topic for us. I don't think Americans and American companies understand how little trust rest of us have for the American government. Working with a company that is not subject to the whims of the American government is a huge privacy win. If a company pitches me a product, they start 1 points ahead if they are base…

I'm a European and I have very little trust in European governments. Not much trust in the US government, either.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#114

Post by dorgo »

geraneum wrote: post #80
fritigern wrote: post #53

Earlier quoted context omitted.

> we're in a country with better privacy laws Speaking as a European: I think this is a very important topic for us. I don't think Americans and American companies understand how little trust rest of us have for the American government. Working with a company that is not subject to the whims of the American government is a huge privacy win. If a company pitches me a product, they start 1 points ahead if they are base…

People are talking about the possibility of being spied on by governments. I think if you’re targeted by government or intelligence agencies, then even self hosting most likely won’t save you from them. What is important here, and why these laws matter, is how trivial it is to get access to your data, or for companies to sell your data. That’s why I appreciate the European’s effort to have better laws for our privacy…

Goverments and intelligence agencies can't target everyone. But they can gather data for future use. So if you don't give them your data you won't be targeted in the future.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#116

Post by matthews2 »

moffkalast wrote: post #109
usrlocal1023 wrote: post #22

The service doesn't seem to support IPv6 as there are no AAAA DNS records. $ dog A AAAA fonts.bunny.net CNAME fonts.bunny.net. 10s "bunnyfonts.b-cdn.net." A bunnyfonts.b-cdn.net. 10s 195.181.164.130 CNAME fonts.bunny.net. 9s "bunnyfonts.b-cdn.net." A bunnyfonts.b-cdn.net. 9s + 195.181.164.130

I'm still not entirely sure why anyone would load fonts from a 3rd party link that's bound to break sometime. Just add it to your assets like a normal person and Cloudflare will cache it for you anyway. The license is non-standard too, something called SIL. I'm not gonna bother looking up what that weird thing permits when I can get thousands of CC0 fonts from like a dozen sites.

> The license is non-standard too, something called SIL. I'm not gonna bother looking up what that weird thing permits

It's the same as Google Fonts (because they're the same fonts). Most of the fonts are released under the terms of the SIL Open Font License 1.1, and a handful of them released under the terms of the Apache License 2.0.

Most free fonts are OFL'd.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#117

Post by dundarious »

fritigern wrote: post #53
hannob wrote: post #31

I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…

> we're in a country with better privacy laws Speaking as a European: I think this is a very important topic for us. I don't think Americans and American companies understand how little trust rest of us have for the American government. Working with a company that is not subject to the whims of the American government is a huge privacy win. If a company pitches me a product, they start 1 points ahead if they are base…

I’m surprised you emphasized government wrt. privacy here. Sure, despite the fact that the US government institutions have more mechanisms for oversight and transparency after 20 or 40 years, etc., they are certainly the most profligate in their use of surveillance and hacking, etc., and US three letter agencies are the most adept at completely side-stepping those publicized limitations — so it’s not like the government isn’t an issue, and the US government most of all.

But when it comes to surveillance on this quotidian level, I think private/corporate surveillance it’s far more relevant and problematic. In that regard, I’d slightly prefer a European country with good privacy laws like those you listed, because (probably) Bunny is not itself at the level of a panopticon such as Google, and the likelihood it has or would avail of avenues for resale to panopticon capable data brokers is less than it would be for US companies.

But even there, it does seem like a quite incremental improvement. The door is still wedged open, but now probably less wide, and probably with a stronger doorstop. It would be nice to not leave the door open at all.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#119

Post by aembleton »

unicornporn wrote: post #58

A CDN for this? Sorry, but just store the fonts on the same d**n server you're serving the site from. Files are tiny, it's not 1080p video we're talking.

d**n?

Is that damn, or down, or something else? Why astreisk it out?

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#120

Post by cramforce »

Do not use this, use Google Fonts, just self-host them. This site claims better privacy, but does so using the wrong solution since you still have to trust them.

Self host (supported by Google Fonts but not by this service): - Better privacy - Better performance (no extra DNS lookups, TLS connection)

Their default embed code is a CSS @import directive. These must never be used in production code (It's fine as a directive for the compiler for local files but not with remote URLs). Leads to FOUC and FOIT.

Also, next step in amateur hour: They serve their CSS and fonts on the same domain as their marketing website. Cookies galore.

Post reply on HN