[
https://issues.apache.org/jira/browse/KUDU-3640?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17916549#comment-17916549
]
Alexey Serbin commented on KUDU-3640:
-------------------------------------
Hi [~niallp],
Thank you very much for the detailed report and the information on the content
policies.
[~achennaka] is currently working on releasing Apache Kudu 1.18.0, and probably
the removal of Google Analytics links from the website's pages can be done
along with corresponding updates to [the Apache Kudu
website|https://kudu.apache.org/] when 1.18.0 is released.
The rest of the requested updates might be moved into a separate JIRA item, but
let's see how the progress on this item goes.
BTW, if you have some spare cycles, setting up gerrit environment to contribute
to Kudu isn't that hard and documented at
[https://kudu.apache.org/docs/contributing.html|https://kudu.apache.org/docs/contributing.html].
For website-related changes, submit them into the 'gh-pages' gerrit branch,
as described [in the
page|https://kudu.apache.org/docs/contributing.html#_submitting_patches].
> Remove Google Analytics from the Kudu Website
> ---------------------------------------------
>
> Key: KUDU-3640
> URL: https://issues.apache.org/jira/browse/KUDU-3640
> Project: Kudu
> Issue Type: Task
> Components: website
> Reporter: Niall Pemberton
> Priority: Major
>
> Hi Kudu Team
> The ASF {_}*Privacy Policy*{_}[1][2] does not permit the use of _*Google
> Analytics*_ on any ASF websites and the ASF Infra team will soon enforce a
> {_}*Content Security Policy*{_}(CSP) that will block access to external
> trackers:
> * [https://lists.apache.org/thread/w34sd92v4rz3j28hyddmt5tbprbdq6lc]
> Please could you remove the use of the Google Analytics from the Kudu website?
> * [https://lists.apache.org/thread/gx92qvkgwpkn7y45hlpt60f5bh9zbwy1]
> I would have submitted a PR, but I see you're using Gerrit, so apologies, I'm
> not familiar with that, but it looks like the following file needs to be
> modified:
> * https://github.com/niallkp/kudu/blob/gh-pages/_includes/bottom_common.html
>
> The ASF hosts its own _*Matomo*_ instance to provide projects with analytics
> and you can request a tracking id for your project by sending a mail to
> *privacy AT apache.org.*
> *
> [https://privacy.apache.org/faq/committers.html#can-i-use-web-analytics-matomo]
>
> Additionally I would recommend reviewing any external resources loaded by
> your website. The Content Security Policy will prevent any resources being
> loaded from 3rd Party providers that the ASF does not have a Data Processing
> Agreement (DPA) with. On the 1st February Infra will begin a temporary
> "brownout" when the CSP will be turned on for a short period. This will allow
> projects to check which parts, if any, of their websites will stop working.
> The Privacy FAQ answers a number of questions about which external providers
> are permitted or not:
> * [https://privacy.apache.org/faq/committers.html]
> Thanks
> Niall
> [1] [https://privacy.apache.org/policies/website-policy.html]
> [2]
> [https://privacy.apache.org/faq/committers.html#can-i-use-google-analytics]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
