Consider serving Mirrorbits static files from our server
The Mirrorbits web UI (example 1, example 2) loads JS, CSS and fonts from third-party websites. That UI is not meant to be used by Tails users, but it's documented in the mirrors design docs and may be somewhat frequently used by some Tails teams (eg. @sysadmin-team, @foundations-team, @mirrors-team).
We need to assess how bad of a privacy issue it represents, and whether the cost of implementing the workaround would be worthwhile.
Implementing this would need:
- Automatic download/update of static files using Mirrorbits' bundled
fetchfiles.sh - Installation and configuration of a webserver to serve those files (assuming we'd serve them from
rsync.lizard) - Configuration of the reverse proxy in
www.lizard - Configuration of
LocalJSPathin mirrorbits config pointing to the corresponding URI
Edited by Zen Fu