Hi Jakob,

Is that right?  I have trouble seeing the privacy gains in this instance since 
the client via reVddit is merely querying reddit in the same manner it would by 
visiting reddit itself.

Connecting from my own server would, I believe, result in requests getting 
throttled by reddit since their API puts limits on how many requests a client 
can make (~60 per minute). It would also result in a slower experience for the 
end user to be re-routed through whatever tiny server I would allocate to this 
free software project.

Ehsan,

Thanks for your reply. I'm afraid I still don't understand the details of 
Tracking Protection. Are there any social media sites that are not on the 
tracking protection list? How are they distinguished from reddit? Perhaps if I 
understand this bit I'll be convinced to move the requests to the server side.

To clarify, revddit.com does not load any scripts from reddit. It queries 
reddit's API in the same way reddit does to help users know about 3rd parties 
removing content that they shared online.  It does not require a login from the 
user and only uses my developer API key. The site currently does nothing if it 
cannot query reddit directly via the client. I see two options,

(1) Gracefully let users know that they have Tracking Protection enabled and 
explain the above.

(2) Move the requests code to the server, possibly resulting in poorer 
performance.

Cheers,

Rob
_______________________________________________
dev-privacy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-privacy

Reply via email to