olivierlacan / keep-a-changelog

If you build software, keep a changelog.
http://keepachangelog.com
MIT License
6.12k stars 3.62k forks source link

Webbkoll: Security suggestions #454

Open throwaway-d opened 1 year ago

throwaway-d commented 1 year ago

https://webbkoll.dataskydd.net/en/results?url=http%3A%2F%2Fkeepachangelog.com image

About Google Fonts, you should self-host the font or just use system font because:

  1. Beautiful web fonts are not that necessary. Also system fonts is actually beautiful and nice to read. No need for downloading a web font and slowing down the performance.

  2. It is also better for accessibility since you can customize the font to the one that works well for you. image

Other than security, this also poses a threat to user privacy since Google can track your site visitors: https://fonts.google.com/analytics

I use uBlock Origin to block web fonts. https://developer.mozilla.org/en-US/docs/Learn/CSS/Styling_text/Fundamentals#web_safe_fonts

Another thing I notice is that even you also track your visitors with secure.gaug.es?! Please considering removing the trackers or at least switching to a more privacy-friendly, open-source and self-hostable service like Umami, Plausible Analytics, Matomo.