You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@datasketches.apache.org by Dave Fisher <wa...@apache.org> on 2024/02/19 23:29:56 UTC
ASF Website Policy Changes
Hi -
Related to GPDR the ASF changed privacy policy sometime ago and there are two actions that DataSketches needs to do on the project website ASAP: https://whimsy.apache.org/site/project/datasketches
(1) Add a link to the privacy policy
(2) Convert external resources by either removing or making them internal.
Best,
Dave
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@datasketches.apache.org
For additional commands, e-mail: dev-help@datasketches.apache.org
Re: ASF Website Policy Changes
Posted by Dave Fisher <wa...@apache.org>.
Hi Lee,
That would be fine, just know that the Pinot website has the same privacy policy issues: https://whimsy.apache.org/site/project/pinot
Best,
Dave
> On Feb 20, 2024, at 12:36 PM, Lee Rhodes <le...@gmail.com> wrote:
>
> We are investigating a web-site deployment model exemplified by what Pinot is doing. Their website front page is clearly hosted by ASF, but all of their documentation is hosted by GitBook.com. Documentation is clearly an Apache copyrighted asset. And I didn't see GitBook listed on the policy pages as an allowed alternative. So I'm wondering if this is something we could do as well.
>
> On Tue, Feb 20, 2024 at 12:16 PM Dave Fisher <wave@apache.org <ma...@apache.org>> wrote:
> Hi Lee,
>
>
> > On Feb 20, 2024, at 11:45 AM, Lee Rhodes <leerho@gmail.com <ma...@gmail.com>> wrote:
> >
> > Dave,
> > On https://whimsy.apache.org/site/project/datasketches <https://whimsy.apache.org/site/project/datasketches> under the "Resources" row, it has the link Websites must not link to externally hosted resources.
> >
> > However, the site that it links to: https://privacy.apache.org/faq/committers.html <https://privacy.apache.org/faq/committers.html> does NOT make such a broad statement as "Websites must not link to externally hosted resources", instead it lists some very specific cases.
> >
> > Also the site: https://privacy.apache.org/policies/website-policy.html <https://privacy.apache.org/policies/website-policy.html> does not make such a broad statement either and lists specific examples of what is not allowed.
>
> 4) Using Assets from other Domains
>
> Assets (JavaScript files or snippets, images, fonts, CSS, etc.) from other domains cannot be loaded. All assets need to be hosted on ASF servers.
>
> For example look at yesterday's commits on https://gitub.com/apache/incubator/ <https://gitub.com/apache/incubator/> to move FontAwesome from CDN to the incubator website.
>
> > What is the underlying principal or property that disqualifies the use of the listed specific cases?
>
> GPDR concerns - ask on privacu@apache.org <ma...@apache.org>
>
> >
> > May I conclude that our website can link to an externally hosted resource as long as it is not one of the examples listed under the policy pages?
>
> You can certainly link to other domains. It is assets that must be in an apache domain including the conferences.
>
> Best,
> Dave
>
> >
> > Cheers,
> > Lee
> >
> >
> >
> >
> >
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@datasketches.apache.org <ma...@datasketches.apache.org>
> For additional commands, e-mail: dev-help@datasketches.apache.org <ma...@datasketches.apache.org>
>
Re: ASF Website Policy Changes
Posted by Lee Rhodes <le...@gmail.com>.
We are investigating a web-site deployment model exemplified by what Pinot
is doing. Their website front page is clearly hosted by ASF, but all of
their documentation is hosted by GitBook.com. Documentation is clearly an
Apache copyrighted asset. And I didn't see GitBook listed on the policy
pages as an allowed alternative. So I'm wondering if this is something we
could do as well.
On Tue, Feb 20, 2024 at 12:16 PM Dave Fisher <wa...@apache.org> wrote:
> Hi Lee,
>
>
> > On Feb 20, 2024, at 11:45 AM, Lee Rhodes <le...@gmail.com> wrote:
> >
> > Dave,
> > On https://whimsy.apache.org/site/project/datasketches under the
> "Resources" row, it has the link Websites must not link to externally
> hosted resources.
> >
> > However, the site that it links to:
> https://privacy.apache.org/faq/committers.html does NOT make such a broad
> statement as "Websites must not link to externally hosted resources",
> instead it lists some very specific cases.
> >
> > Also the site: https://privacy.apache.org/policies/website-policy.html
> does not make such a broad statement either and lists specific examples of
> what is not allowed.
>
> 4) Using Assets from other Domains
>
> Assets (JavaScript files or snippets, images, fonts, CSS, etc.) from other
> domains cannot be loaded. All assets need to be hosted on ASF servers.
>
> For example look at yesterday's commits on
> https://gitub.com/apache/incubator/ to move FontAwesome from CDN to the
> incubator website.
>
> > What is the underlying principal or property that disqualifies the use
> of the listed specific cases?
>
> GPDR concerns - ask on privacu@apache.org
>
> >
> > May I conclude that our website can link to an externally hosted
> resource as long as it is not one of the examples listed under the policy
> pages?
>
> You can certainly link to other domains. It is assets that must be in an
> apache domain including the conferences.
>
> Best,
> Dave
>
> >
> > Cheers,
> > Lee
> >
> >
> >
> >
> >
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@datasketches.apache.org
> For additional commands, e-mail: dev-help@datasketches.apache.org
>
>
Re: ASF Website Policy Changes
Posted by Dave Fisher <wa...@apache.org>.
Hi Lee,
> On Feb 20, 2024, at 11:45 AM, Lee Rhodes <le...@gmail.com> wrote:
>
> Dave,
> On https://whimsy.apache.org/site/project/datasketches under the "Resources" row, it has the link Websites must not link to externally hosted resources.
>
> However, the site that it links to: https://privacy.apache.org/faq/committers.html does NOT make such a broad statement as "Websites must not link to externally hosted resources", instead it lists some very specific cases.
>
> Also the site: https://privacy.apache.org/policies/website-policy.html does not make such a broad statement either and lists specific examples of what is not allowed.
4) Using Assets from other Domains
Assets (JavaScript files or snippets, images, fonts, CSS, etc.) from other domains cannot be loaded. All assets need to be hosted on ASF servers.
For example look at yesterday's commits on https://gitub.com/apache/incubator/ to move FontAwesome from CDN to the incubator website.
> What is the underlying principal or property that disqualifies the use of the listed specific cases?
GPDR concerns - ask on privacu@apache.org
>
> May I conclude that our website can link to an externally hosted resource as long as it is not one of the examples listed under the policy pages?
You can certainly link to other domains. It is assets that must be in an apache domain including the conferences.
Best,
Dave
>
> Cheers,
> Lee
>
>
>
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@datasketches.apache.org
For additional commands, e-mail: dev-help@datasketches.apache.org
Re: ASF Website Policy Changes
Posted by Lee Rhodes <le...@gmail.com>.
Dave,
On https://whimsy.apache.org/site/project/datasketches under the
"Resources" row, it has the link Websites must not link to externally
hosted resources <https://privacy.apache.org/faq/committers.html>.
However, the site that it links to:
https://privacy.apache.org/faq/committers.html does NOT make such a broad
statement as "Websites must not link to externally hosted resources",
instead it lists some very specific cases.
Also the site: https://privacy.apache.org/policies/website-policy.html does
not make such a broad statement either and lists specific examples of what
is not allowed.
What is the underlying principal or property that disqualifies the use of
the listed specific cases?
May I conclude that our website can link to an externally hosted resource
as long as it is not one of the examples listed under the policy pages?
Cheers,
Lee
Re: ASF Website Policy Changes
Posted by Jon Malkin <jo...@gmail.com>.
I _think_ they're all concentrated in the site header file here:
https://github.com/apache/datasketches-website/blob/master/_includes/site_head.html
* The first 2 refer to url('../fonts/...')
* The fonts.googleapis one refers to fonts.gstatic.com in many places
* MathJax is distributed by cloudflare and ... seems to check itself in
that js
* jquery doesn't obviously load another site but I'm not entirely sure what
it does here
* bootstrap relies on jquery being defined and similarly doesn't obviously
load anything but I'm not really sure
I added to the earlier PR to add a link in the Apache dropdown in the upper
right corner, too, not just the footer.
jon
On Mon, Feb 19, 2024 at 8:48 PM Dave Fisher <wa...@apache.org> wrote:
> If you share the list you might find that it depends
>
>
> On Feb 19, 2024, at 8:37 PM, Jon Malkin <jo...@gmail.com> wrote:
>
> I created a PR to link to the main Apache privacy policy. The other stuff
> will be more complicated than I'd realized: Several of the files link to
> other remote files. We need to either crawl the tree and resolve things or
> find alternatives.
>
> jon
>
>
> On Mon, Feb 19, 2024 at 6:36 PM Jon Malkin <jo...@gmail.com> wrote:
>
>> Perfect. I'll get on it this evening
>>
>> jon
>>
>> On Mon, Feb 19, 2024, 6:16 PM Dave Fisher <wa...@apache.org> wrote:
>>
>>>
>>>
>>> On Feb 19, 2024, at 4:08 PM, Jon Malkin <jo...@gmail.com> wrote:
>>>
>>> Dave,
>>>
>>> Thanks for pointing this out. I'll work on a footer update shortly for
>>> (1).
>>>
>>> For (2), I think this is about embedding things like javascript and
>>> fonts, not where we link to external sites? I want to make sure I
>>> understand what changes are needed.
>>>
>>>
>>> What I had to do for a few sites is that wherever we external js and
>>> css, usually from a cdn, we are asked to keep a copy on the website.
>>>
>>> I got the resources but identifying those and then something like:
>>>
>>> curl
>>> https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
>>> > js/popper.min.js
>>>
>>> Best,
>>> Dave
>>>
>>>
>>> Thanks,
>>> jon
>>>
>>> On Mon, Feb 19, 2024 at 3:30 PM Dave Fisher <wa...@apache.org> wrote:
>>>
>>>> Hi -
>>>>
>>>> Related to GPDR the ASF changed privacy policy sometime ago and there
>>>> are two actions that DataSketches needs to do on the project website ASAP:
>>>> https://whimsy.apache.org/site/project/datasketches
>>>>
>>>> (1) Add a link to the privacy policy
>>>> (2) Convert external resources by either removing or making them
>>>> internal.
>>>>
>>>> Best,
>>>> Dave
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: dev-unsubscribe@datasketches.apache.org
>>>> For additional commands, e-mail: dev-help@datasketches.apache.org
>>>>
>>>>
>>>
>
Re: ASF Website Policy Changes
Posted by Dave Fisher <wa...@apache.org>.
If you share the list you might find that it depends
> On Feb 19, 2024, at 8:37 PM, Jon Malkin <jo...@gmail.com> wrote:
>
> I created a PR to link to the main Apache privacy policy. The other stuff will be more complicated than I'd realized: Several of the files link to other remote files. We need to either crawl the tree and resolve things or find alternatives.
>
> jon
>
>
> On Mon, Feb 19, 2024 at 6:36 PM Jon Malkin <jon.malkin@gmail.com <ma...@gmail.com>> wrote:
> Perfect. I'll get on it this evening
>
> jon
>
> On Mon, Feb 19, 2024, 6:16 PM Dave Fisher <wave@apache.org <ma...@apache.org>> wrote:
>
>
>> On Feb 19, 2024, at 4:08 PM, Jon Malkin <jon.malkin@gmail.com <ma...@gmail.com>> wrote:
>>
>> Dave,
>>
>> Thanks for pointing this out. I'll work on a footer update shortly for (1).
>>
>> For (2), I think this is about embedding things like javascript and fonts, not where we link to external sites? I want to make sure I understand what changes are needed.
>
> What I had to do for a few sites is that wherever we external js and css, usually from a cdn, we are asked to keep a copy on the website.
>
> I got the resources but identifying those and then something like:
>
> curl https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js <https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js> > js/popper.min.js
>
> Best,
> Dave
>
>>
>> Thanks,
>> jon
>>
>> On Mon, Feb 19, 2024 at 3:30 PM Dave Fisher <wave@apache.org <ma...@apache.org>> wrote:
>> Hi -
>>
>> Related to GPDR the ASF changed privacy policy sometime ago and there are two actions that DataSketches needs to do on the project website ASAP: https://whimsy.apache.org/site/project/datasketches <https://whimsy.apache.org/site/project/datasketches>
>>
>> (1) Add a link to the privacy policy
>> (2) Convert external resources by either removing or making them internal.
>>
>> Best,
>> Dave
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@datasketches.apache.org <ma...@datasketches.apache.org>
>> For additional commands, e-mail: dev-help@datasketches.apache.org <ma...@datasketches.apache.org>
>>
>
Re: ASF Website Policy Changes
Posted by Jon Malkin <jo...@gmail.com>.
I created a PR to link to the main Apache privacy policy. The other stuff
will be more complicated than I'd realized: Several of the files link to
other remote files. We need to either crawl the tree and resolve things or
find alternatives.
jon
On Mon, Feb 19, 2024 at 6:36 PM Jon Malkin <jo...@gmail.com> wrote:
> Perfect. I'll get on it this evening
>
> jon
>
> On Mon, Feb 19, 2024, 6:16 PM Dave Fisher <wa...@apache.org> wrote:
>
>>
>>
>> On Feb 19, 2024, at 4:08 PM, Jon Malkin <jo...@gmail.com> wrote:
>>
>> Dave,
>>
>> Thanks for pointing this out. I'll work on a footer update shortly for
>> (1).
>>
>> For (2), I think this is about embedding things like javascript and
>> fonts, not where we link to external sites? I want to make sure I
>> understand what changes are needed.
>>
>>
>> What I had to do for a few sites is that wherever we external js and css,
>> usually from a cdn, we are asked to keep a copy on the website.
>>
>> I got the resources but identifying those and then something like:
>>
>> curl
>> https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
>> > js/popper.min.js
>>
>> Best,
>> Dave
>>
>>
>> Thanks,
>> jon
>>
>> On Mon, Feb 19, 2024 at 3:30 PM Dave Fisher <wa...@apache.org> wrote:
>>
>>> Hi -
>>>
>>> Related to GPDR the ASF changed privacy policy sometime ago and there
>>> are two actions that DataSketches needs to do on the project website ASAP:
>>> https://whimsy.apache.org/site/project/datasketches
>>>
>>> (1) Add a link to the privacy policy
>>> (2) Convert external resources by either removing or making them
>>> internal.
>>>
>>> Best,
>>> Dave
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@datasketches.apache.org
>>> For additional commands, e-mail: dev-help@datasketches.apache.org
>>>
>>>
>>
Re: ASF Website Policy Changes
Posted by Jon Malkin <jo...@gmail.com>.
Perfect. I'll get on it this evening
jon
On Mon, Feb 19, 2024, 6:16 PM Dave Fisher <wa...@apache.org> wrote:
>
>
> On Feb 19, 2024, at 4:08 PM, Jon Malkin <jo...@gmail.com> wrote:
>
> Dave,
>
> Thanks for pointing this out. I'll work on a footer update shortly for (1).
>
> For (2), I think this is about embedding things like javascript and fonts,
> not where we link to external sites? I want to make sure I understand what
> changes are needed.
>
>
> What I had to do for a few sites is that wherever we external js and css,
> usually from a cdn, we are asked to keep a copy on the website.
>
> I got the resources but identifying those and then something like:
>
> curl
> https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js
> > js/popper.min.js
>
> Best,
> Dave
>
>
> Thanks,
> jon
>
> On Mon, Feb 19, 2024 at 3:30 PM Dave Fisher <wa...@apache.org> wrote:
>
>> Hi -
>>
>> Related to GPDR the ASF changed privacy policy sometime ago and there are
>> two actions that DataSketches needs to do on the project website ASAP:
>> https://whimsy.apache.org/site/project/datasketches
>>
>> (1) Add a link to the privacy policy
>> (2) Convert external resources by either removing or making them internal.
>>
>> Best,
>> Dave
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@datasketches.apache.org
>> For additional commands, e-mail: dev-help@datasketches.apache.org
>>
>>
>
Re: ASF Website Policy Changes
Posted by Dave Fisher <wa...@apache.org>.
> On Feb 19, 2024, at 4:08 PM, Jon Malkin <jo...@gmail.com> wrote:
>
> Dave,
>
> Thanks for pointing this out. I'll work on a footer update shortly for (1).
>
> For (2), I think this is about embedding things like javascript and fonts, not where we link to external sites? I want to make sure I understand what changes are needed.
What I had to do for a few sites is that wherever we external js and css, usually from a cdn, we are asked to keep a copy on the website.
I got the resources but identifying those and then something like:
curl https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js > js/popper.min.js
Best,
Dave
>
> Thanks,
> jon
>
> On Mon, Feb 19, 2024 at 3:30 PM Dave Fisher <wave@apache.org <ma...@apache.org>> wrote:
> Hi -
>
> Related to GPDR the ASF changed privacy policy sometime ago and there are two actions that DataSketches needs to do on the project website ASAP: https://whimsy.apache.org/site/project/datasketches <https://whimsy.apache.org/site/project/datasketches>
>
> (1) Add a link to the privacy policy
> (2) Convert external resources by either removing or making them internal.
>
> Best,
> Dave
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@datasketches.apache.org <ma...@datasketches.apache.org>
> For additional commands, e-mail: dev-help@datasketches.apache.org <ma...@datasketches.apache.org>
>
Re: ASF Website Policy Changes
Posted by Jon Malkin <jo...@gmail.com>.
Dave,
Thanks for pointing this out. I'll work on a footer update shortly for (1).
For (2), I think this is about embedding things like javascript and fonts,
not where we link to external sites? I want to make sure I understand what
changes are needed.
Thanks,
jon
On Mon, Feb 19, 2024 at 3:30 PM Dave Fisher <wa...@apache.org> wrote:
> Hi -
>
> Related to GPDR the ASF changed privacy policy sometime ago and there are
> two actions that DataSketches needs to do on the project website ASAP:
> https://whimsy.apache.org/site/project/datasketches
>
> (1) Add a link to the privacy policy
> (2) Convert external resources by either removing or making them internal.
>
> Best,
> Dave
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@datasketches.apache.org
> For additional commands, e-mail: dev-help@datasketches.apache.org
>
>