Cache onebox images and/or serve them from the main domain

[max.l]

@Falco

IANAL, so can’t really help there. But if the user is sharing a link to website, like Ars in my example, that means the user already visited that site to get the link? And it won’t load the image from the third party for anyone else right ?

That is not the issue. The issue is that the information that the user is using a particular forum is transmitted to the linked page without user consent in the header of the images in the preview window. The linked page can therefore link the user to the fact that they are using the forum itself which depending on the type of forum can be sensible information under the GDPR, and the user would need to be informed about this kind of transit of information (and be able to reject it) which Discourse can right now not offer.