-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 07/12/15 12:10, Tim Wilson-Brown - teor wrote:
On 7 Dec 2015, at 19:14, Karsten Loesing <karsten@torproject.org> wrote:
On 07/12/15 01:07, Spencer wrote:
Hi,
teor: Do David's visualizations already use JavaScript? We could make (another) part of the metrics site use JavaScript.
Can the data be processed on the host server and sent to the client JS-free?
We briefly discussed making a JavaScript-free Globe a while ago by using Node.js. I'm not sure whether this would also work for Metrics. It may depend on how interactive graphs are supposed to be.
There are privacy advantages to doing the Globe processing on the client using JavaScript. It's a design that means that user queries are never seen by the server.
Well, queries are still seen by the Onionoo server.
But before we look more into this: do we really have no JavaScript at all? The High Security level in Tor Browser says that JavaScript performance optimizations are disabled and that JavaScript is disabled on all non-HTTPS sites, but in theory, Metrics runs on HTTPS, so the bubble graphs should work in Tor Browser.
The Medium-High level disables JavaScript on non-HTTPS sites. The High level disables JavaScript on all sites. (In either case, users can enable it on a site-by-site basis.)
You're right. Thanks for clarifying this. All the best, Karsten -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQEcBAEBAgAGBQJWZYNPAAoJEJD5dJfVqbCrkSEIAJl9jgfXUXGpqG3BRoGIWFZX 8rrajfUz8mOYKBBFZZBHmFQC2vMsexAqH9XBYAPjRvWVHG6HcPq/C9ng6+xYDjQN SDYCt6v7PdrhyPHA1h31XdNmo1CQ6Tn+YUuwyWhIHRGYSOaTJ8vr46mTswKQUXQd 1cIl7zPmD3dR+YBPhcgL/OL06YLVKOdPt1RMvnIghTKimgd9DQ3iHSwFQ23ZMhyM necMSkespRPgeWjrICHgVWKKITQTRewbvuj93aNZrzvSNLSpXkpRo94q1KoEifrW PqIB4CVPYkwKKOCnCphyT5hYbjgEfaAy8DQB8rw6KRnN9yXVP6xKy46eV+nsJrA= =9Gax -----END PGP SIGNATURE-----