Advanced

Sites knocked offline by OpenDNS freeze on Google

Posted by Scott_Ruecker on · 13 comments
The Register; By Gavin Clarke
Mail this story
Print this story

Innocent websites were blocked and labelled phishers on Wednesday following an apparent conflict between OpenDNS and Google's Content Delivery Network (CDN). OpenDNS - a popular domain name lookup service* - sparked the outage by blocking access to googleapis.com, Google's treasure trove of useful scripts and apps for web developers. According to reports, a flood of errors hit pages that used Google-hosted jQuery and hundreds of thousands of sites fell over.

Full Story

  Nav
» Read more about: Story Type: News Story

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (13)

why would i ever want to link to a javascript library that my site depends on, from some 3-rd party host? seems like a recipe for disaster to me. just to save a few cents in download cost?

this example here is just one thing that can go wrong.

someone please tell me that i am wrong and that there are very good reasons for doing this. otherwise i'd go as far as saying that the sites that follow this practice deserve what they got.

greetings, eMBee.
Just do what I do download the Javascript library and serve it from the client's own website. Saves on having to rely on third parties.
JQuery via Google means updates and fixes to JQuery are published without site admin intervention. Same thing with Yahoo API's.

(Not worth it, IMNSHO.)
When we can actually rely on the web, and, what with the US passing special interest bills like SOPA, I don't see that day coming anytime soon, then yes, link to 3rd party websites for important functionality in one's client's Websites, by all means, until then the reliability of my client's website comes before some marginal amount of extra convenience.
tracyanne: until i read this article i had not even considered not serving from the client's own website. it's kinda like not providing a bathroom in my restaurant because customers can go to the neighbors restaurant to use the bathroom instead...

gus3: not only not worth it, a bad idea too. what if the update breaks something? also, in the linked article about a workaround it shows that the link is made to a versioned path, so upgrades would not be covered there.

greetings, eMBee.
@embee, you'd be surprised how many corporate websites link to 3rd party providers... then again, maybe not.
Having jQuery linked directly on Google in order to escape the hassle of updating it actually creates potentially more hassle. Mainly because you might be running several plugins, some of which will rely on a particular version of jQuery - then one day, unbeknownst to you, they update jQuery and half your plugins break.

What mb/ta said. :)
There's a few reasons:

1) To save on your site's bandwidth. A ~70k file multiplied by thousands of visitors a day adds up to a fair bit of bandwidth.

2) More importantly, to improve your site's loading speed. If a user visits 20 different sites all using the latest jQuery, but which self-host it, he'll have to download that exact same library 20 times. But if those sites all point to Google, then that user only downloads the library once, and stores it in the browser's cache for subsequent sites which also point to the same place.

Finally, you don't have to depend on Google. Use the following code in your header:

  <script src="//ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js" type="text/javascript"></script>
  <script type="text/javascript">
    if(typeof jQuery === 'undefined') {
        document.write(unescape('%3Cscript type="text/javascript" src="js/jquery-1.4.4.min.js" %3E%3C/script%3E'));
    }
  </script> <!--fall back to local copy of jquery-->


This will load the library from Google, but if Google fails for some reason, it'll fall back to your local copy.
The other reason for not using a third party is security, and no Khamul I don't see any reason to trust Google such that I'm going to plug in a script from them into my client's secure pages. I'll go with a minor speed hit, and I don't think that 70k is such a big deal when compared to the size of images and other media.
Yarrp, I think the days of tiny little sub-50Kb pages are long gone.
tracyanne: i am not surprised at linking to 3rd party providers for site specific functionality, some site's like button, message feeds and all that stuff. and i would also not be surprised for some to link to a version provided by the developers of a library, like you use some google api by linking to a library file on googles site. but there is no indication on the jquery site to do so, but only instructions on how to download your customized version of jquery. that means whoever links to somewhere else must have specifically thought about it being a better alternative.

greetings, eMBee.
@tracyanne: It depends on your needs; if you're doing something high-security, then obviously linking to Google stuff isn't a great idea. If you're just hosting a blog, then what's the big deal?
Quoting:if you're doing something high-security, ...


Well my client certainly believes it is, as it includes credit card payments pages, and his web interface to administer the site.

Quoting:If you're just hosting a blog, then what's the big deal?


If it was my blog, the less access I give to Google the better.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post