While we're talking about privacy and CDN delivery, check out Decentraleyes. It's a browser extension which keeps a local cache of common CDN-delivered files.
https://decentraleyes.org/
I wondered if it supports fonts out of the box, but not currently.
https://github.com/Synzvato/decentraleyes/issues/105
In Bunny fonts – privacy respecting drop-in replacement for Google FontsSynzvato
decentraleyes
JavaScript2016–2022
Synzvato / decentraleyes · Archived
decentraleyes
This repository has a new home: https://git.synz.io/Synzvato/decentraleyes
20Distinct people
22Mentions
0Explicit recommenders
1.5KGitHub stars
What to know before exploring
What it is
This repository has a new home: https://git.synz.io/Synzvato/decentraleyes
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 5:04:57 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year22 dated mentions
Observed mentions: 2016-01-18 14:01:50 UTC to 2022-06-19 20:32:24 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 9 | 1 | 8 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 6 | 2 | 4 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 3 | 0 | 3 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 3 | 0 | 3 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 1 | 0 | 1 |
From the project README
An excerpt from the repository, fetched Nov 13, 2026.
Read the project’s introduction
Decentraleyes
A web browser extension that emulates Content Delivery Networks to improve your online privacy. It intercepts traffic, finds supported resources locally, and injects them into the environment. All of this happens automatically, so no prior configuration is required. Feel free to use the following testing utility to find out if you are properly protected.
Note: Decentraleyes is no silver bullet, but it does prevent a lot of websites from making you send these kinds of requests. Ultimately, you can make Decentraleyes block requests for any missing CDN resources, too.
Contributing Code
Suggestions in the form of Issues, and contributions in the form of Pull Requests, are highly welcome. You can also use the public contact details and PGP key on the extension's contact page to get in touch.
Prerequisites
Mozilla Firefox 56 (or higher).
Note: If you want to contribute to the Firefox legacy extension, please check out the legacy branch. If you are looking for the Chromium-compatible codebase, please see the experimental branch.
Running the Code
Please read this short guide for information on how to run this extension from source.
Important: All commits since 26 October 2016 are signed with GPG. It's likely best to ignore unsigned commits, unless you really know what you're doing. Please send an email if you have any questions or security concerns.
Submitting Translations
Do you master a non-supported language? Please help out by translating this add-on on Crowdin.
License
MPL-2.0.
Read the full README on GitHubWhat Hacker News says
22 sourcesDoes Decentraleyes cache fonts? Last I looked into it (b/c this extension makes using the web less broken from China) they didn't cache fonts:
https://github.com/Synzvato/decentraleyes/issues/34
However maybe the situation has changed since then..
In Self-host your fonts for better performanceIt's better to block web fonts with uBlock Origin. It would be sweet if someone could add support for these fonts to Decentraleyes as well, which seems to be missing. Seems to be some debate about the merits of doing so, however: https://github.com/Synzvato/decentraleyes/issues/34
I'm okay with 1st party usage, but I don't want Google following me around the web.
In The Fastest Google FontsDecentraleyes[0] does this for JavaScript files. There was a request to add fonts[1], but it hasn't been implemented.
[0]: https://decentraleyes.org/
[1]: https://github.com/Synzvato/decentraleyes/issues/34
In New.css – A classless CSS framework to write modern websites using only HTML> I think it'd be nice to have a browser option where it simply won't load content from outside of the current domain.
Take a look at uMatrix[0]. With the two rules
* * * block
* 1st-party * allow
you'll achieve what you want.
> To me what's more alarming is what percentage of websites load js from Google
That's where the Decentraleyes[1] plugin comes in handy. It injects a locally cached version of 3rd party cdn libraries. To use it easily in conjunction with uMatrix, you'll need some more rules that you can find in the FAQ[2].
[0]: https://addons.mozilla.org/en-US/firefox/addon/umatrix/
[1]: https://addons.mozilla.org/en-US/firefox/addon/decentraleyes...
[2]: https://github.com/Synzvato/decentraleyes/wiki/Frequently-As...
In Apple will attempt to jam Facebook's web-tracking toolsDecentraleyes[0] is a great plugin that intercepts many popular 3rd party CDN requests and replaces them with local copies. It's not a silver bullet, but it reduces CDN-based tracking and the chance of the attack described in the parent comment.
Subresource integrity[1] is a technology that's been available for a while that also mitigates this attack, if used properly by website owners.
[0]: https://decentraleyes.org/ and https://github.com/Synzvato/decentraleyes
[1]: https://www.w3.org/TR/SRI/
In Drive-by Rowhammer attack uses GPU to compromise an Android phoneI think you can already do a browser extension that intercepts loads and gets things with script integrity from a cache, another domain, ipfs, whatever.
Decentraleyes is an example of an existing codebase you could use: https://github.com/Synzvato/decentraleyes
In Protecting sites from Cryptojacking with CSP and SRIIn case it's of any help to you, I use https://github.com/Synzvato/decentraleyes which had 2 of these 3 CDNs cached. And the 3rd (unpkg - an npmjs.com mirror) seemed not to be a hard requirement as far as I could tell.
In Try to not play with these slidersDecentraleyes: privacy-oriented emulation of Content Delivery Networks
1 points · Open discussionDecentraleyes finally available for Chromium-based browsers
2 points · Open discussionDecentraleyes for Firefox helps with this issue, it's a script cache for CDN assets like jQuery: https://github.com/Synzvato/decentraleyes/wiki/Simple-Introd...
In Using Immutable Caching to Speed Up the WebI've always wanted a browser extension, perhaps built on Decentraleyes[1], which replaces the amp code with code that drops ads and trackers and just shows text and images. For bonus points you could look at httpseverywhere[2] and transform the google.com cached urls back to the originals.
Alas, it's rare to find a phone browser that supports extensions.
1: https://github.com/Synzvato/decentraleyes
2: https://github.com/EFForg/https-everywhere
In You can't disable Google AMPPrivacy Badger [0] does this, among other things. I use it in combination with uBlock [1] and Decentraleyes [2], which replaces many CDN-hosted resources (eg. Google Fonts) with locally cached copies.
[0] https://www.eff.org/privacybadger
[1] https://github.com/gorhill/uBlock
[2] https://github.com/Synzvato/decentraleyes
In Show HN: Sharingbuttons.io – Fast and easy social media sharing buttonsShowing the 15 most recent of 22 sources. Enable JavaScript to search and browse every indexed mention.