Open dieghernan opened 1 year ago
More on images:
If an user provides the email the app can try to get the avatar from Gravatar, using https://ui-avatars.com/ as fallback, see in the ui-avatar docs:
https://www.gravatar.com/avatar/EMAIL_MD5?s=64&d=https%3A%2F%2Fui-avatars.com%2Fapi%2F/Lasse+Rafn/64
On an existing user:
https://www.gravatar.com/avatar/205e460b479e2e5b48aec07710c08d50?s=64&d=https%3A%2F%2Fui-avatars.com%2Fapi%2F/Lasse+Rafn/64
The MD5 hash of the email can be derived as explained https://es.gravatar.com/site/implement/hash/
My concern here is privacy, since MD5 is not fully secured (can be broken by brute force to get back the email). I would favored that or, at least, give the user the option to opt out
Oh, I see on https://welcomments.io/blog/november-2021-update
I did consider Gravatar, but I’m not sure if it’s a good idea in 2022 to expose the md5 hashes of users’ email addresses to everyone visiting a given site.
I will have to look at the “proper” way to add avatars, maybe it’s Gravatar, maybe it’s something else.
Hi @roughike
As you already know, I implemented welcomments on https://dieghernan.github.io/chulapa/docs/02-config#xx-other-settings
I share here with you some thoughs:
On the bot
./_data
instead to./docs/_data
. Then, on the site deployment the comments are gathered via your js plugin and not from the local storage on GitHub. So If a user with this setup opts out of the js plugin the comments are not shown, since Jekyll would look for data ondocs/_data
. My workaround was to move the content from_data
todocs/data
.On the templates
author website
. I think this is easy to fix on the templates with something likeA new css rule would be needed, something like
On the css
I noticed that the custom css https://cdn.welcomments.io/welcomments.css interacts badly with Fontawesome, basically due to this kind of rules:
In my case I needed to ship a modified version of the welcomments removing the font-family rules.
Misc
On avatar image, welcomments seems to be ready to use custom images but it is not integrated (at least not in the customr form). My understanding is that providing a form for inputting an url to an avatar is easy. Would it be something that you may consider to expand?
Regards and thanks for this coooool plugin