3 ms·

Not really, the browser caches these files. They're only loaded once. No requests for subsequent usages. I don't see how that helps for spying on visitors? Goo

Not really, the browser caches these files. They're only loaded once. No requests for subsequent usages. I don't see how that helps for spying on visitors? Google must be doing it to improve performance.

kawera 11y ago
Sure, I give Google the benefit of the doubt in regard to user data collection on GF. As for caching, mobile phones have very small caches and will reload fonts frequently, specially with the large variety of fonts available. And if the browser can cache font files it can also cache stylesheets with base64 encoded fonts, saving requests at the same time.
EdwardDiego 11y ago
> They're only loaded once. No requests for subsequent usages. Are you sure? Typically a <script> tag pointing to a cached script will still trigger a conditional GET.
- radicalbyte 11y ago
  If you include an expiry date with a cache-control header then the server won't be contacted. I typically use this in combination with a unique suffix (for changes) for my web applications. It appears that google are not doing that, they are indeed using these scripts to track your users. Take jquery for example: Response: Remote Address:[2a00:1450:4009:80a::200a]:443 Request URL:https://ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js Request Method:GET Status Code:304 OK Response Headers: age:414824 alt-svc:quic=":443"; p="1"; ma=604800 alternate-protocol:443:quic,p=1 date:Tue, 29 Sep 2015 15:17:51 GMT expires:Wed, 28 Sep 2016 15:17:51 GMT server:GFE/2.0 status:304
  - kawera 11y ago
    If Google isn't doing that, wow, they ARE tracking GF users!
Too 11y ago
If you use ad blocker for privacy reasons you probably also clear your cache once in a while to get rid of tracking cookies. Then you also loose all your cached fonts/jquery/etc.
- radicalbyte 11y ago
  Oh, I block all 3rd party links from all sites with uMatrix. The only things that ever get through are CDNs.

kawera 11y ago

Sure, I give Google the benefit of the doubt in regard to user data collection on GF. As for caching, mobile phones have very small caches and will reload fonts frequently, specially with the large variety of fonts available. And if the browser can cache font files it can also cache stylesheets with base64 encoded fonts, saving requests at the same time.

EdwardDiego 11y ago

> They're only loaded once. No requests for subsequent usages. Are you sure? Typically a <script> tag pointing to a cached script will still trigger a conditional GET.

radicalbyte 11y ago
If you include an expiry date with a cache-control header then the server won't be contacted. I typically use this in combination with a unique suffix (for changes) for my web applications. It appears that google are not doing that, they are indeed using these scripts to track your users. Take jquery for example: Response: Remote Address:[2a00:1450:4009:80a::200a]:443 Request URL:https://ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js Request Method:GET Status Code:304 OK Response Headers: age:414824 alt-svc:quic=":443"; p="1"; ma=604800 alternate-protocol:443:quic,p=1 date:Tue, 29 Sep 2015 15:17:51 GMT expires:Wed, 28 Sep 2016 15:17:51 GMT server:GFE/2.0 status:304
- kawera 11y ago
  If Google isn't doing that, wow, they ARE tracking GF users!

Too 11y ago

If you use ad blocker for privacy reasons you probably also clear your cache once in a while to get rid of tracking cookies. Then you also loose all your cached fonts/jquery/etc.

radicalbyte 11y ago
Oh, I block all 3rd party links from all sites with uMatrix. The only things that ever get through are CDNs.