From 1156f95b9251f6da1dfb1368fdeb95784dce9d2b Mon Sep 17 00:00:00 2001 From: "http://smcv.pseudorandom.co.uk/" Date: Fri, 14 Feb 2014 06:47:20 -0400 Subject: [PATCH] --- ...big_brother_spy_on_our_users_on_login.mdwn | 25 +++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/doc/bugs/do_not_let_big_brother_spy_on_our_users_on_login.mdwn b/doc/bugs/do_not_let_big_brother_spy_on_our_users_on_login.mdwn index 7c7c016cb..b29241b4e 100644 --- a/doc/bugs/do_not_let_big_brother_spy_on_our_users_on_login.mdwn +++ b/doc/bugs/do_not_let_big_brother_spy_on_our_users_on_login.mdwn @@ -30,3 +30,28 @@ A simple fix would be to ship those icons with ikiwiki and serve them locally, b > legal stuff involved. (from a practical point of view, things are not that > strict, as `apt-file find facebook.png` and `apt-file find flickr.png` > reveal.) --[[chrysn]] + +>> The fundamental problem here is that we want to balance these +>> somewhat incompatible goals: +>> +>> * show users a provider icon that they'll recognise at a glance +>> * don't infringe copyright +>> * don't distribute non-DFSG-licensed things in the source package +>> * don't let miscellaneous OpenID providers track our users +>> +>> A "quick hack" version of removing these would be to have an option to +>> disable the friendly JavaScript OpenID selector and go back to a simple +>> input box. I might implement that option anyway - on websites mainly used +>> by technologists, the OpenID selector is a bit of a waste of time. +>> +>> One way to have recognisable icons would be to ship DFSG imitations of +>> the "real" logos in the underlay. Between gnome-online-accounts and +>> Empathy, we can probably find most of them (mostly or perhaps all done by +>> Jakub Steiner). +>> +>> If people want the "real" logos, we could have some code to make IkiWiki +>> download the favicons into transient underlay (which I think is +>> higher-priority?), or into a higher-priority underlay if necessary, +>> during the wiki build, so they'll be served from the wiki's own server. +>> +>> --[[smcv]] -- 2.44.0