Privacy issue with third party images

[matthewruzzi]

Currently podcast cover art images are loaded directly from the source website which reveals the user's IP address and user agent to the hosts of all podcasts that have cover art shown. Searching for "Podcasting 2.0" results in 63 third party image requests being made. Ideally images would be loaded through a secure proxy server to prevent the hosts of the image from being able to see information about the user.

@daveajones

[matthewruzzi]

https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/about-anonymized-urls
https://github.blog/news-insights/product-news/proxying-user-images/
https://github.blog/news-insights/the-library/sidejack-prevention-phase-3-ssl-proxied-assets/

[daveajones]

I’d love to do that if it wasn’t too expensive. Our project runs on donations. Any suggestions on the cheapest way to accomplish this without hurting performance too much?

[matthewruzzi]

DuckDuckGo provides a free image proxy.

Basically, just replace image URLs on images so they start as https://example.com/image.png and turn into https://external-content.duckduckgo.com/iu/?u=https://example.com/image.png.

vladimiry/ElectronMail#312

[matthewruzzi]

This issue also affects rssbuilder.

https://github.com/Podcastindex-org/rssbuilder
https://github.com/MartinMouritzen/rssbuilder