[
https://issues.apache.org/jira/browse/ATTIC-230?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17927733#comment-17927733
]
Niall Pemberton commented on ATTIC-230:
---------------------------------------
Hi Sebb,
{quote}
Given that the CSP stops the references from working, is there any point in
updating the sources?
{quote}
This is a good question and essentially the same point I've asked Christian
about [Maven and JClouds Old
Docs|https://lists.apache.org/thread/ofs0mqwshsfxf7j6b729s6n9g4vrddg8] on
privacy@, but he didn't reply to that yet. However, Christian did say in
January that [we must change sites in the
Attic|https://lists.apache.org/thread/qfcs98yht2pq4g0pc4cc4stpyod2kcd6] and the
CSP had been announced before that.
I would also make the following points about this:
* We do want _active projects_ to move away from Google Analytics, even if the
CSP blocks it. Removing it from Attic project sites makes it easier to track
(from the report sent to the Privacy Committee) which _active projects_ need to
take action. So it reduces the *noise*
* Theres no real *downside* I can see to taking out GA, except for the effort
- but since I've provided patches, I hope that reduces the burden on the Attic
PMC
* Projects may try to circumvent the CSP, so to my mind, monitoring for things
like GA usage going forward is still useful. Again removing GA from Attic
project sites reduces the *noise* on the report and therefore makes it easier
to identify real issues in _active projects_
{quote}
Also, merely removing references to google analytics is unlikely to be
sufficient to satisfy the privacy requirements.
For example, eagle loads external css and js files as well.
{quote}
Thats true - at the moment I'm focusing on Analytics.
Besides the privacy aspect I guess we also need to see the effect of blocking
those resources has on how the Attic project's websites render. So that may
also be a reason to look at other external resources being loaded.
{quote}
Completely removing all such references will be a lot of work.
{quote}
Agreed and I haven't considered whether I'm prepared to help with that or not
if there is a desire to do it. Probably the first thing to do is it discuss
with Christian what he thinks should be done or whether we should do nothing
with Attic sites loading resources from 3rd parties
> Remove Google Analytics from Attic Projects in SVN
> --------------------------------------------------
>
> Key: ATTIC-230
> URL: https://issues.apache.org/jira/browse/ATTIC-230
> Project: Attic
> Issue Type: Task
> Reporter: Niall Pemberton
> Priority: Major
> Attachments: cocoon-site-ga-v1.patch,
> continuum-site-publish-ga-v1.patch, directmemory-site-content-ga-v1.patch,
> eagle-site-ga-baidu-v1.patch, hama-site-trunk-ga-v1.patch,
> ibatis-site-final-ga-v1.patch, marmotta-ga-v1.patch, ode-ga-v1.patch,
> reef-site-ga-v1.patch, stanbol-ga-v1.patch, stdcxx-site-ga-v1.patch,
> stdcxx-trunk-doc-ga-v1.patch, stratos-ga-v1.patch, tajo-site-ga-v1.patch,
> tuscany-site-publish-ga-v1.patch, twill-site-ga-v1.patch, wink-ga-v1.patch
>
>
> The following projects in the Attic use *_Google Analytics_* in their
> websites - these projects' websites are all published from SVN - attaching
> patches to remove GA
> h1. COCOON
> Description: Remove Google Analytics from *1 file*
> * Relative To: [https://svn.apache.org/repos/asf/cocoon/site/site/]
> * Patch File: *cocoon-site-ga-v1.patch*
> h1. CONTINUUM
> Description: Remove Google Analytics from *3,205 files*
> * Relative To: [https://svn.apache.org/repos/asf/continuum/site-publish/]
> * Patch File: *continuum-site-publish-ga-v1.patch*
> h1. DIRECTMEMORY
> Description: Remove Google Analytics from *615 files*
> * Relative To: [https://svn.apache.org/repos/asf/directmemory/site-content/]
> * Patch File: *directmemory-site-content-ga-v1.patch*
> h1. EAGLE
> Description: Remove Google & Baidu Analytics from *51 files*
> * Relative To: [https://svn.apache.org/repos/asf/eagle/site]
> * Patch File: *eagle-site-ga-baidu-v1.patch*
> h1. HAMA
> Description: Remove Google Analytics from *23 files*
> * Relative To: [https://svn.apache.org/repos/asf/hama/site/trunk]
> * Patch File: *hama-site-trunk-ga-v1.patch*
> h1. IBATIS
> Description: Remove Google Analytics from *1 file*
> * Relative To: [https://svn.apache.org/repos/asf/ibatis/site-final]
> * Patch File: *ibatis-site-final-ga-v1.patch*
> h1. MARMOTTA
> Description: Remove Google Analytics from *68 files*
> * Relative To: [https://svn.apache.org/repos/infra/sites/marmotta/]
> * Patch File: *marmotta-ga-v1.patch*
> h1. ODE
> Description: Remove Google Analytics from *90 files*
> * Relative To: [https://svn.apache.org/repos/infra/sites/ode/]
> * Patch File: *ode-ga-v1.patch*
> h1. REEF
> Description: Remove Google Analytics from *24 files*
> * Relative To: [https://svn.apache.org/repos/asf/reef/site/]
> * Patch File: *reef-site-ga-v1.patch*
> h1. STANBOL
> Description: Remove Google Analytics from *171 files*
> * Relative To: [https://svn.apache.org/repos/infra/sites/stanbol/]
> * Patch File: *stanbol-ga-v1.patch*
> h1. STDCXX
> Description: Remove Google Analytics from *560 files*
> * Relative To: [https://svn.apache.org/repos/asf/stdcxx/site/]
> * Patch File: *stdcxx-site-ga-v1.patch*
> * Relative To: [https://svn.apache.org/repos/asf/stdcxx/trunk/doc]
> * Patch File: *stdcxx-trunk-doc-ga-v1.patch*
> h1. STRATOS
> Description: Remove Google Analytics from *17 files*
> * Relative To: [https://svn.apache.org/repos/infra/sites/stratos/]
> * Patch File: *stratos-ga-v1.patch*
> h1. TAJO
> Description: Remove Google Analytics from *32 files*
> * Relative To: [https://svn.apache.org/repos/asf/tajo/site]
> * Patch File: *tajo-site-ga-v1.patch*
> h1. TUSCANY
> Description: Remove Google Analytics from *497 files*
> * Relative To:
> [https://svn.apache.org/repos/asf/tuscany/site/trunk/site-publish]
> * Patch File: *tuscany-site-publish-ga-v1.patch*
> h1. TWILL
> Description: Remove Google Analytics from *16 files*
> * Relative To: [https://svn.apache.org/repos/asf/twill/site/]
> * Patch File: *twill-site-ga-v1.patch*
> h1. WINK
> Description: Remove Google Analytics from *8 files*
> * Relative To: [https://svn.apache.org/repos/infra/sites/wink/]
> * Patch File: *wink-ga-v1.patch*
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
