this post was submitted on 14 Nov 2023
190 points (97.5% liked)

Technology

58094 readers
3168 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 34 points 10 months ago (4 children)

Kill third party everything. No more CDNs, no more tracking pixels, no more cookies, no more content from anything but the domain in the url bar.

[–] [email protected] 31 points 10 months ago (2 children)

No more CDNs is a bad fucking idea.

[–] [email protected] 5 points 10 months ago* (last edited 10 months ago) (2 children)

Any CDN worth its salt can run on your domain so that's not an issue. The issue is that no third-party anything is pointless as links will just change from nyt.adnetwork.com to adnetwork.nyt.com. I'd rather not encourage those kinds of DNS shenanigans.

[–] [email protected] 3 points 10 months ago (1 children)

What about a CDN for JS libraries?

What about YouTube embeds?

What about images from Imgur?

Why should all of this be handled by me, on my domain?

[–] [email protected] 3 points 10 months ago* (last edited 10 months ago)

You'd tell cloudflare DNS "yo put your stuff on cloudflare-cdn.mydomain.foo". Embeds should be iframes, that is, different webpages, imgur could do the same though yes it's overkill. Another option would imgur offering an automated API that would allow cloudflare DNS to tell it "here's a key, please get ready to serve on imgur-cdn.mydomain.foo".

It can all be handled on your domain without you actually running the backing servers. It's also insanity.

[–] [email protected] 2 points 10 months ago (1 children)

Running a CDN on your domain effectively defeats the purpose of CDN.

[–] [email protected] 2 points 10 months ago (1 children)

No. Things being on your domain doesn't mean that traffic hits your servers.

[–] [email protected] -1 points 10 months ago (1 children)

It doesn't, but it defeats the purpose of CDN, because your users still hit your domain instead of CDN one and cannot leverage the benefits of distributed caching. Browser cache is bound to a URL, you change one letter and it is invalidated.

[–] [email protected] 1 points 10 months ago* (last edited 10 months ago) (1 children)

Why would the URL change?

It won't share js libraries and fonts and whatnot cross-site but compared to a single image that should be negligible. At least if you don't pull in gazillions of superfluous dependencies and don't even run dead code elimination over them. And anyway that's more bandwith usage between user and CDN, not user and you.

Also I already said that it's insanity. But it would work.

[–] [email protected] -1 points 10 months ago (1 children)

Because you're not using a CDN URL everyone else is.

Savings are massive for the user. If you don't care about your users, please stop doing anything development related.

[–] [email protected] 1 points 10 months ago (1 children)

You know what's faster than a CDN? Vanilla js.

And how often do I have to repeat that it's insanity? It's just that user network traffic doesn't even come close to the top of reasons why it's a bad idea.

[–] [email protected] -2 points 10 months ago (1 children)

Insanity is what you have in your head.

[–] [email protected] 2 points 10 months ago* (last edited 10 months ago)

I wasn't the one advocating to outlaw cross-site everything. I only said that it could be made to work... not well, but still. Also that it's a bad idea. Do you disagree with that?

But yes I'm also insane how could you tell.

[–] [email protected] 1 points 10 months ago (2 children)
[–] [email protected] 17 points 10 months ago (2 children)

CDNs like CloudFlare reduce load on smaller servers through caching and delivery of common assets, which reduces load times (helping to democratize sites as it's not just big companies that can afford quick websites). CDNs also prevent DDoS attacks and can improve uptime.

They're pretty critical pieces of internet architecture. Not that they're perfect, but banning all third party content from sites is kind of a baby/bathwater situation.

[–] [email protected] 13 points 10 months ago

CDNs also reduce load on the network. Why pull a resource from a server on the opposite side of the world when a CDN on my 'door step' can provide a cached version of it.

[–] [email protected] 2 points 10 months ago
[–] [email protected] 0 points 10 months ago

The purpose of a CDN is to better cache common resources between different web sites. For example, if you're using a Roboto font from Google CDN on your web site, just like many other web sites do, the user who previously visited other sites with such font will load your web site much faster and will spend less traffic, because he already has this font from CDN in their cache. It also means that you save money on hosting.

If you remove CDN from the equation, you punish yourself and your users. That's a very dumb idea. Especially when CDNs are free to use.

[–] [email protected] 15 points 10 months ago (1 children)

What if everything is just routed through the backend and still is able to track you?

[–] [email protected] 13 points 10 months ago

But that is a lot harder to do and requires more resources.

If you have a tracking pixel now, the company directly knows your browser from you downloading that pixel. If they were to implement the single-backend stuff, the site would have to gather all that information themselves and then send it to all the trackers. But they can't just send it somewhere, because then everyone could send bogus info to them so you need verification and an api and that is costly and each company would build their own api so you need to buy a program that speaks all those apis... You get the point. It's a LOT more work than just pasting the text for some pixel somewhere on your site and let the others do the rest.

[–] [email protected] 4 points 10 months ago
[–] [email protected] 1 points 10 months ago

This person absolutely HATES Twitter embeds.