# Defaulting to discourse.org CDN for avatars is a privacy and security risk

**URL:** <https://meta.discourse.org/t/defaulting-to-discourse-org-cdn-for-avatars-is-a-privacy-and-security-risk/33731>\
**Category:** Feature\
**Tags:** privacy\
**Created:** [2015 年9 月 25 日 03:35 UTC](https://meta.discourse.org/t/defaulting-to-discourse-org-cdn-for-avatars-is-a-privacy-and-security-risk/33731 "2015-09-25T03:35:51Z")\
**Posts on this page:** 1\
**Showing post:** 25

<div class="post-metadata">

作者： ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
发布日期： [2015 年9 月 25 日 23:02 UTC](https://meta.discourse.org/t/defaulting-to-discourse-org-cdn-for-avatars-is-a-privacy-and-security-risk/33731/25 "2015-09-25T23:02:25Z")

</div>

Eric, I am open to working with you on making proxy a default.

Can you do a local Discourse install, then enter your container and mess around with nginx conf until it proxies correctly, once you get it going paste the nginx config section here and I can look at integrating it. It will take a few months to move to local proxy by default cause everyone needs to do a rebuild to get nginx changes.

---

_[View the full topic](https://meta.discourse.org/t/defaulting-to-discourse-org-cdn-for-avatars-is-a-privacy-and-security-risk/33731)._