[tor-dev] Scaling Tor Metrics, Round 2

[Karsten Loesing]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/12/15 12:10, Tim Wilson-Brown - teor wrote:
> 
>> On 7 Dec 2015, at 19:14, Karsten Loesing <karsten at torproject.org>
>> wrote:
>> 
>> On 07/12/15 01:07, Spencer wrote:
>>> Hi,
>>>> teor: Do David's visualizations already use JavaScript? We
>>>> could make (another) part of the metrics site use
>>>> JavaScript.
>>>> 
>>> 
>>> Can the data be processed on the host server and sent to the 
>>> client JS-free?
>> 
>> We briefly discussed making a JavaScript-free Globe a while ago
>> by using Node.js.  I'm not sure whether this would also work for
>> Metrics. It may depend on how interactive graphs are supposed to
>> be.
> 
> There are privacy advantages to doing the Globe processing on the
> client using JavaScript. It's a design that means that user queries
> are never seen by the server.

Well, queries are still seen by the Onionoo server.

>> But before we look more into this: do we really have no
>> JavaScript at all?  The High Security level in Tor Browser says
>> that JavaScript performance optimizations are disabled and that
>> JavaScript is disabled on all non-HTTPS sites, but in theory,
>> Metrics runs on HTTPS, so the bubble graphs should work in Tor
>> Browser.
> 
> 
> The Medium-High level disables JavaScript on non-HTTPS sites. The
> High level disables JavaScript on all sites. (In either case, users
> can enable it on a site-by-site basis.)

You're right.  Thanks for clarifying this.

All the best,
Karsten

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJWZYNPAAoJEJD5dJfVqbCrkSEIAJl9jgfXUXGpqG3BRoGIWFZX
8rrajfUz8mOYKBBFZZBHmFQC2vMsexAqH9XBYAPjRvWVHG6HcPq/C9ng6+xYDjQN
SDYCt6v7PdrhyPHA1h31XdNmo1CQ6Tn+YUuwyWhIHRGYSOaTJ8vr46mTswKQUXQd
1cIl7zPmD3dR+YBPhcgL/OL06YLVKOdPt1RMvnIghTKimgd9DQ3iHSwFQ23ZMhyM
necMSkespRPgeWjrICHgVWKKITQTRewbvuj93aNZrzvSNLSpXkpRo94q1KoEifrW
PqIB4CVPYkwKKOCnCphyT5hYbjgEfaAy8DQB8rw6KRnN9yXVP6xKy46eV+nsJrA=
=9Gax
-----END PGP SIGNATURE-----