[jira] [Commented] (KUDU-3640) Remove Google Analytics from the Kudu Website

["Alexey Serbin (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/KUDU-3640?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17916549#comment-17916549 ] 

Alexey Serbin commented on KUDU-3640:
-------------------------------------

Hi [~niallp],

Thank you very much for the detailed report and the information on the content policies.

[~achennaka] is currently working on releasing Apache Kudu 1.18.0, and probably the removal of Google Analytics links from the website's pages can be done along with corresponding updates to [the Apache Kudu website|https://kudu.apache.org/] when 1.18.0 is released.

The rest of the requested updates might be moved into a separate JIRA item, but let's see how the progress on this item goes.

BTW, if you have some spare cycles, setting up gerrit environment to contribute to Kudu isn't that hard and documented at [https://kudu.apache.org/docs/contributing.html|https://kudu.apache.org/docs/contributing.html].  For website-related changes, submit them into the 'gh-pages' gerrit branch, as described [in the page|https://kudu.apache.org/docs/contributing.html#_submitting_patches].

> Remove Google Analytics from the Kudu Website
> ---------------------------------------------
>
>                 Key: KUDU-3640
>                 URL: https://issues.apache.org/jira/browse/KUDU-3640
>             Project: Kudu
>          Issue Type: Task
>          Components: website
>            Reporter: Niall Pemberton
>            Priority: Major
>
> Hi Kudu Team
> The ASF {_}*Privacy Policy*{_}[1][2] does not permit the use of _*Google Analytics*_ on any ASF websites and the ASF Infra team will soon enforce a {_}*Content Security Policy*{_}(CSP) that will block access to external trackers:
>  * [https://lists.apache.org/thread/w34sd92v4rz3j28hyddmt5tbprbdq6lc]
> Please could you remove the use of the Google Analytics from the Kudu website?
>  * [https://lists.apache.org/thread/gx92qvkgwpkn7y45hlpt60f5bh9zbwy1]
> I would have submitted a PR, but I see you're using Gerrit, so apologies, I'm not familiar with that, but it looks like the following file needs to be modified:
>  * https://github.com/niallkp/kudu/blob/gh-pages/_includes/bottom_common.html
>  
> The ASF hosts its own _*Matomo*_ instance to provide projects with analytics and you can request a tracking id for your project by sending a mail to *privacy AT apache.org.*
>  * [https://privacy.apache.org/faq/committers.html#can-i-use-web-analytics-matomo]
>  
> Additionally I would recommend reviewing any external resources loaded by your website. The Content Security Policy will prevent any resources being loaded from 3rd Party providers that the ASF does not have a Data Processing Agreement (DPA) with. On the 1st February Infra will begin a temporary "brownout" when the CSP will be turned on for a short period. This will allow projects to check which parts, if any, of their websites will stop working. The Privacy FAQ answers a number of questions about which external providers are permitted or not:
>  * [https://privacy.apache.org/faq/committers.html]
> Thanks
> Niall
> [1] [https://privacy.apache.org/policies/website-policy.html]
> [2] [https://privacy.apache.org/faq/committers.html#can-i-use-google-analytics]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)