2 ms·
Do you care about privacy and authentication when downloading react.js from a CDN?
by forgotpwtomain 10y ago
Do you care about privacy and authentication when downloading react.js from a CDN?
- Klathmon 10y agoYou might not, but some may. Others still may care about keeping their ISP or the public WiFi they are on from seeing they are downloading some scripts from CDNs. Things like that are great for fingerprinting (only 2 sites happen to use these 6 scripts with these specific versions, so if someone downloads those they are on one of those sites). Plus it still leaks tons of data in the headers. Request time, cache length, useragent, cookies (maybe, hopefully not), accept-* headers, if modified since leaking the last download time, and possibly a lot more.