(no commit message)

diff --git a/doc/bugs/do_not_let_big_brother_spy_on_our_users_on_login.mdwn b/doc/bugs/do_not_let_big_brother_spy_on_our_users_on_login.mdwn
index 7c7c016cba075dc692aebe6a7c4b9cd169946636..b29241b4e08984e1ad71a5fe01fcf83222a6b089 100644 (file)
--- a/doc/bugs/do_not_let_big_brother_spy_on_our_users_on_login.mdwn
+++ b/doc/bugs/do_not_let_big_brother_spy_on_our_users_on_login.mdwn
@@ -30,3 +30,28 @@ A simple fix would be to ship those icons with ikiwiki and serve them locally, b
 > legal stuff involved. (from a practical point of view, things are not that
 > strict, as `apt-file find facebook.png` and `apt-file find flickr.png`
 > reveal.) --[[chrysn]]
 > legal stuff involved. (from a practical point of view, things are not that
 > strict, as `apt-file find facebook.png` and `apt-file find flickr.png`
 > reveal.) --[[chrysn]]

+
+>> The fundamental problem here is that we want to balance these
+>> somewhat incompatible goals:
+>>
+>> * show users a provider icon that they'll recognise at a glance
+>> * don't infringe copyright
+>> * don't distribute non-DFSG-licensed things in the source package
+>> * don't let miscellaneous OpenID providers track our users
+>>
+>> A "quick hack" version of removing these would be to have an option to
+>> disable the friendly JavaScript OpenID selector and go back to a simple
+>> input box. I might implement that option anyway - on websites mainly used
+>> by technologists, the OpenID selector is a bit of a waste of time.
+>>
+>> One way to have recognisable icons would be to ship DFSG imitations of
+>> the "real" logos in the underlay. Between gnome-online-accounts and
+>> Empathy, we can probably find most of them (mostly or perhaps all done by
+>> Jakub Steiner).
+>>
+>> If people want the "real" logos, we could have some code to make IkiWiki
+>> download the favicons into transient underlay (which I think is
+>> higher-priority?), or into a higher-priority underlay if necessary,
+>> during the wiki build, so they'll be served from the wiki's own server.
+>>
+>> --[[smcv]]