Oddbean new post about login | logout I know I'm being annoying saying this, but I think this needs to pointed out for those who might want to use it. INAL, this is not legal advice, but a blog made this way is in all likelihood not GDPR-compliant. As soon as one opens the website, one's IP address (which is personal data) is sent to (and collected by) relay servers the user doesn't even know about. So one should be mindful of that. Still cool project, thanks for sharing it!
Its open source, no? You can add all the baggage you would like to the package Daniele published
> Its open source, no? I don't know how to answer this question. It doesn't have a license at the moment. > You can add all the baggage you would like to the package Daniele published I can. I pointed it out for others who might want to use this, especially people located in the EU/UK or other territories with similar laws.
Fixed https://image.nostr.build/75b4a8f39c9a0e40b65be3ec5c315f637a6ed233c77769a835b7469427204229.png
I don't think it *can* be fixed. It requires that the IP of the user is sent automatically to relays, most or all of which are not GDPR-compliant. I wasn't requesting a change. Rather, I was warning those who may chose to rely on this of something to consider.
Indeed, GDPR is a giant mess that make no sense for the most part and has proven to be ineffective. I was kidding about the fix, I just added a note to surface the relay concept, that is central in Nostr; incidentally this works also as transparent informative about where data is fetched, and so with whom IPs are shared, for just technical reasons, has requested by GDPR. In fact it's not different that hotlink an image. Finally the user can, and should, personalize the relays, using something he has verified and trust (e.g. one's own).
> Indeed, GDPR is a giant mess that make no sense for the most part and has proven to be ineffective. I don't really consider the GDPR that messy, compared to other laws. It's ineffective when people or companies don't comply with it. But all laws have people breaking them and getting away with it. Regardless, I wasn't attempting to endorse or oppose the GDPR, just pointing this out as something to consider before using this. > In fact it's not different that hotlink an image. Which can also be an issue GDPR-wise and even CDNs can be dubious.
