Cdnjs - the missing cdn • Hacker News Board

That's pretty awesome! I've always wondered why popular css grids weren't also CDN'd. Bootstrap, 960, etc, etc - it makes great sense to have many of these things cached across 100s of sites 1 time - instead of 100 times. Modify the cdn version in a seperate style sheet afterwards.

Re: Cdnjs - the missing cdn

#5

Post by [deleted] » Tue, Aug 21, 2012, 11:42 AM UTC

ckluis wrote: post #4

That's pretty awesome! I've always wondered why popular css grids weren't also CDN'd. Bootstrap, 960, etc, etc - it makes great sense to have many of these things cached across 100s of sites 1 time - instead of 100 times. Modify the cdn version in a seperate style sheet afterwards.

[deleted]

Re: Cdnjs - the missing cdn

#6

Post by jvehent » Tue, Aug 21, 2012, 11:44 AM UTC

Who pays for this ? How do I know you're not going to replace some of that javascript with malicious content ?

Re: Cdnjs - the missing cdn

#7

Post by [deleted] » Tue, Aug 21, 2012, 11:46 AM UTC

ckluis wrote: post #4

That's pretty awesome! I've always wondered why popular css grids weren't also CDN'd. Bootstrap, 960, etc, etc - it makes great sense to have many of these things cached across 100s of sites 1 time - instead of 100 times. Modify the cdn version in a seperate style sheet afterwards.

[deleted]

Re: Cdnjs - the missing cdn

#8

Post by ambirex » Tue, Aug 21, 2012, 11:48 AM UTC

ckluis wrote: post #4

That's pretty awesome! I've always wondered why popular css grids weren't also CDN'd. Bootstrap, 960, etc, etc - it makes great sense to have many of these things cached across 100s of sites 1 time - instead of 100 times. Modify the cdn version in a seperate style sheet afterwards.

The same people who are doing the cdnjs have been planning do a CSS one as well, https://github.com/cdnjs/cdncss

Re: Cdnjs - the missing cdn

#9

Post by dpcx » Tue, Aug 21, 2012, 11:55 AM UTC

jvehent wrote: post #6

Who pays for this ? How do I know you're not going to replace some of that javascript with malicious content ?

How do you know Google/Microsoft won't either?

Re: Cdnjs - the missing cdn

#10

Post by ryankirkman » Tue, Aug 21, 2012, 11:55 AM UTC

jvehent wrote: post #6

Who pays for this ? How do I know you're not going to replace some of that javascript with malicious content ?

Cloudflare pays for this. They've been sponsoring cdnjs for around a year now.

As for the security of our system, all javascript files are verified against official sources before going on the cdn. Additionally, we have many library maintainers submitting updates to their own libraries.

Beyond that the only question remaining is our personal integrity. Like any relationship with a third party, you're going to have to decide whether trusting us is an acceptable level of risk. If past performance is any indication of integrity, we have had no security incidents since we began in January 2011.