Re: Re: Re: Using Cloudflare as CDN for debian.org website

2019-06-21 Thread Joerg Jaspert
On 15439 March 1977, Bagas Sanjaya wrote: How on earth do you consider that to even remotely be an advantage? We *want* the website to be usable to everyone, not just to human beings. So, if we want to make debian.org usable and accessible to everyone, even allowing bots (search engine indexers

Re: Re: Re: Using Cloudflare as CDN for debian.org website

2019-06-19 Thread Bagas Sanjaya
How on earth do you consider that to even remotely be an advantage? We *want* the website to be usable to everyone, not just to human beings. So, if we want to make debian.org usable and accessible to everyone, even allowing bots (search engine indexers and web archivers), while still being bene

Re: Re: Using Cloudflare as CDN for debian.org website

2019-06-19 Thread Wouter Verhelst
On Mon, Jun 17, 2019 at 03:03:47PM +0700, Bagas Sanjaya wrote: > * reCaptcha's dataset is closed source. Google can and will use it as > they wish. They can also use the dataset/the AI against humans or > humanity itself. > > AFAIK, reCAPTCHA's dataset mostly based on road infrastructu

Re: Re: Using Cloudflare as CDN for debian.org website

2019-06-17 Thread Bagas Sanjaya
That is not really answering the question from Steve. At least I can see no point that is in interest for Debian. Carsten and Steve, we're talking about performance and security of debian.org if we use Cloudflare CDN, especially regarding to reCAPTCHA challenge page.

Re: Re: Using Cloudflare as CDN for debian.org website

2019-06-17 Thread Bagas Sanjaya
* reCaptcha's dataset is closed source. Google can and will use it as they wish. They can also use the dataset/the AI against humans or humanity itself. AFAIK, reCAPTCHA's dataset mostly based on road infrastructure in USA (streets, buildings, cars, signs, etc). Those who lived in USA will easil

Re: Re: Using Cloudflare as CDN for debian.org website

2019-06-17 Thread Bagas Sanjaya
Have we a problem that users can't reach the Debian websites on www.d.o? Not as far I know. Having security check before users can access debian.org (www.d.o), in this case by reCAPTCHA, can also present problem: if a user can't pass the check, she can quickly leave www.d.o and she might tel