davidbgk
/
larlet-fr-david
Tarkkaile 1
Äänestä 0
Fork 0
Koodi Julkaisut 0 Activity
Repository with sources and generator of https://larlet.fr/david/ https://larlet.fr/david/
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
896 Commitit
1 Haara
Puu: ffaa972798
Branchit Tagit
${ item.name }
Create branch ${ searchTerm }
from 'ffaa972798'
${ noResults }
larlet-fr-david/david/stream/2015/05/03/index.md

index.md 1.2KB
Raaka Normal View Historia

Add initial content
4 vuotta sitten
​
​
​
​
​
​
​
​
​
​
​
 123456789101112 
  1. title: CDN et juridiction

  2. 

  3. 

  4. > Jurisdiction is a big soft spot. When will CDNs get tapped on the shoulder by local law enforcement in dodgy countries? Can you lock stuff out of particular jurisdictions, so your stuff doesn’t end up in Egypt just for load-balancing reasons? Can the NSA force data to be rehomed in a friendly jurisdiction, e.g. by a light DoS? Then they “request” stuff from a partner rather than “collecting” it. 

  5. > 

  6. > <cite>*[Meeting Snowden in Princeton](https://www.lightbluetouchpaper.org/2015/05/02/meeting-snowden-in-princeton/)* ([cache](/david/cache/1e589c785c5a8a6cec63f8b75f2ecf0b/))</cite>

  7. 

  8. Développeurs, il est de votre devoir d’informer les parties prenantes des significations de l’usage d’un CDN pour des sites critiques. Seuls vos fichiers statiques sont sur un CDN ? Vos données sont à l’abri d’une juridiction clairement identifiée ? Quid d’un bout de JavaScript modifié sur le CDN qui permettrait de lire ces données à l’insu du visiteur et de l’hébergeur ?

  9. 

  10. > The deepest problem is that the system architecture that has evolved in recent years holds masses of information on many people with no intelligence value, but with vast potential for political abuse.

  11. >

  12. > <cite>Ibid.</cite>