ietf
[Top] [All Lists]

Re: IETF web site behind CloudFlare

2014-09-16 12:41:28
On Tue, Sep 16, 2014 at 01:52:32PM +0200, Linus Nordberg wrote:
This is sad because it's now not possible to visit the site without
accepting JavaScript. 
 
That effectively breaks the site for anyone using a text-only browser
or for anyone who (wisely) uses a browser add-on like NoScript. [1]  While
the use of JavaScript for *some* web site functions is reasonable, any
web site that doesn't provide basic functionality (including navigation)
without it is, in my opinion, completely inadequate for professional use.

---rsk

[1] Yes, such users can temporarily un-break it by allowing NoScript
to execute for the particular domain/hostname in question, however
my experience with Cloudflare is that one must permit a random-looking
Cloudflare hostname.  This provides little assurance that the same
hostname will work in the future, nor is there any indication of which
additional sites might be associated with that hostname -- and thus
which a user may be unwittingly permitting to run JavaScript.