# Defaulting to discourse.org CDN for avatars is a privacy and security risk

**URL:** <https://meta.discourse.org/t/defaulting-to-discourse-org-cdn-for-avatars-is-a-privacy-and-security-risk/33731>\
**Category:** Feature\
**Tags:** privacy\
**Created:** [25 سبتمبر 2015، 3:35ص UTC](https://meta.discourse.org/t/defaulting-to-discourse-org-cdn-for-avatars-is-a-privacy-and-security-risk/33731 "2015-09-25T03:35:51Z")\
**Posts on this page:** 1\
**Showing post:** 9

<div class="post-metadata">

**Author:** ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)\
**Post date:** [25 سبتمبر 2015، 6:49ص UTC](https://meta.discourse.org/t/defaulting-to-discourse-org-cdn-for-avatars-is-a-privacy-and-security-risk/33731/9 "2015-09-25T06:49:54Z")

</div>

Sure, just flip the site setting switch, and you have 100% local avatars like before. Not sure what all the fearmongering is about.

---

_[View the full topic](https://meta.discourse.org/t/defaulting-to-discourse-org-cdn-for-avatars-is-a-privacy-and-security-risk/33731)._