News for hackers. Stuff that matters.

A comment on Court confirms that IP addresses are personal data only in some cases (2016). Parent comment

Re:Court confirms that IP addresses are personal data only i... by geofft on Saturday May 19, 2018 @05:03PM (#17109724)
> If you include an image (or a font!) from somewhere else in a web page, you are causing the user's IP address to be sent to the hosting party, are you liable for sending PII if the target can link IPs to names, because they (e.g. Google) have a DB?

As an end user, I want this—if you wouldn't send my IP address to these people otherwise, wanting to show me an image or a font is not a good reason to send it.

As a web developer, I am happy to have excuses to tell my teammates that we need to rehost every asset we depend upon. It's the right thing to do for so many other reasons.

I know this makes things hard for people who have webfonts that don't allow rehosting them etc. Being able to say "We can't use this font because of GDPR unless you change your policies" sounds pretty great honestly.

[ Parent | on HN ]
Re:Court confirms that IP addresses are personal data only i... by StudentStuff on Saturday May 19, 2018 @05:38PM (#17109866)
Hosting every dependency should be the norm, that some sites pull in multiple megs of dependencies from random third parties is just asking for trouble long term.

On the topic of proprietary fonts, why do some websites seem to think using a questionably legible, licensed font is a good idea? It isn't adding value for the end user.

[ Parent | on HN ]