Hacker News new | past | comments | ask | show | jobs | submit login

Are there any extensions that modify external resources and point them towards a "trusted" cdn? e.g. requesting <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.mi...

Would automatically remap to

https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.m...




It is great that you could local cache the top X fonts in Google Fonts and never have to redownload them from Google's CDN. It's just too bad that having fonts locally installed or not can be a signal to trackers or otherwise it would be a lot easier to recommend to everyone to just install larger font banks.


Could we bundle more fonts with Firefox? Or provide a browser opt out for that behaviour...


Bundling more fonts with browsers and operating systems by default is probably the biggest way to do that.

(The corresponding problem with that being how many people would then blame that as browser bloat and complain about the size of all the fonts and how much they "clutter" one's font system.)

The browser would have to be pretty tricksy to solve the tracking problem with local fonts, because the tracking techniques themselves are pretty tricksy.

Such as: Render text to a GL target as fast as possible and hit detect the metrics of the asked for font versus the fallback font.

You would think techniques by the browser to minimize FOUT (flash of unstyled text) mitigates against this sort of tracking, but some of the techniques involve timing between JS load and DOM Ready events.

Admittedly there are easier tests than font loading tests for deanonymization on the web, but obviously if the goal is to de-Google it is worth keeping in mind.


Decentraleyes is an extension that replaces CDN references with local copies (Chrome, Brave, Firefox, Opera).


That’s a really cool idea




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: