by emschlr on 1/31/22, 8:43 AM with 17 comments
I was thinking of starting my own blog recently. I like the idea of having comments section in blog powered by Disqus or another service that can be embedded in website with javascript. But this will be violating GDPR? Is it risky move?
From now on we should load all page resources from the same domain? No more using of external javascript to power syntax highlighting for code blocks, commenting section? What do website owners think about this penalty decision? What changes will you do to your websites to protect yourself?
by speedgoose on 1/31/22, 11:37 AM
by davidkuennen on 1/31/22, 8:58 AM
I think it's becoming increasingly risky to include many different domains without naming them in your terms and explaining what they do with your users data (in this case the IP-Addresses).
It'd be hard for services like Disqus. In such cases I think you'd need to include them in your terms/privacy policy.
Disclaimer: I'm no lawyer/expert
by tannhaeuser on 1/31/22, 9:35 AM
FWIW, yesterday I rushed to change my sites to serve all assets locally.
by Habgdnv on 1/31/22, 10:09 AM
Now imagine this: Then one day you change the image with something else (example - birds picture). Can I sue you that without my permission you changed MY website?
My logic is that if in court I am responsible for something that is outside my webserver (it is on your webserver), then you should be responsible too? (it is still your webserver)
What if one day you decide to start logging IP addresses, and move your blog from your garage server to AWS in USA without notifying me?
by BjoernKW on 1/31/22, 2:16 PM
Decisions like that will only lead to more people and businesses hosting everything themselves when they probably shouldn't. With font files there's probably little that can happen in case one hosts those oneself.
However, for other aspects such as not being allowed anymore to use any third-party service with any connection to the US whatsoever, it's not quite as simple.
If everyone now starts hosting everything themselves, we'll end up with less secure systems, worse security, and less user privacy, because most people and most businesses won't be able to maintain the same security standards as companies like Google. For many services, there simply is no EU-based alternative without any affiliation to US-based companies.
Even if there is, the question remains if those are able to provide the same level of security. Unfortunately, there's this widespread fallacy that a service or provider automatically is "safe" simply by virtue of being EU-based.
Long story short, it is what it is. Not complying with this decision puts you at risk. If that risk is easily mitigated by loading files from your local server instead of a CDN, there's no reason not to do it.
As for services such as Disqus it's more complicated, though. Disqus isn't exactly known for being particularly privacy-friendly. So, apart from the hosting question, it might be a good idea to look for alternatives anyway.
Blogging software products such as WordPress often provide a comment feature out-of-the-box. So, why use a third-party service for that in the first place?
by ketz1 on 1/31/22, 1:48 PM
by dusted on 1/31/22, 10:24 AM