I am concerned about the site security of Ask Ubuntu. I am not sure everything possible is done to protect my private user data. Canonical is presenting itself to support free and open software. Part of that idea is to prevent that closed source software is doing things that users would not expect and would not approve of. That is also true of websites. Also this website which I think is a very good and useful thing. But doesn't some of it violate the ideals above?
To make this a specific question: What are the rationals for the following choices of Canonical for this site:
- the page is displayed by FlagFox to be in USA. Canonical is a UK based company. I would expect that also its community servers are outside the direct law enforcement reach of US Agencies. User privacy would be better protected with a server in Europe.
- why does the page need the following scripts from the following sites
- ajax.googleapis.com. For all it is is unclear, why are scripts from that site required? And what do they do? Where are those servers? Can they be removed without functional loss for the site? Do they protect my data?
Even with those scripts enabled the site is not fully functional when used from Tor. Is that by design?
PS: It is not my intention to say the site is bad, content-wise its really great. Also please note that I do not intend to criticize. Before doing so I would like to learned about why things are as they are.