Comment by graemep
Not accurate.
It has nsa.gov on the leaderboard as having no US dependencies.
It wrongly says one of my sites is using Cloudflare.
It says that one of my sites that is hosted in the US (no CDN, US IP address) has no US dependencies.
it treats social media links the same way was embeds.
it gives gov.uk a perfect score. Maybe by design because it is hosted in Europe, but if so it should not say its EU sovereignty.
I do not think that is the case because it also gives a perfect score to https://english.www.gov.cn/
I do not know how it got to the HN front page - people presumably vote it up without checking it actually works.
Its just not anywhere near accurate.
Fair points, all of them.
The nsa.gov thing: :)
The reals: 1. Hosting detection: I'm matching links TO GitHub as hosting ON GitHub. That's wrong. Fix incoming.
2. US-hosted sites getting 100%: My ASN lookup isn't catching everything. I opted against GeoIP services (privacy reasons), but clearly the ASN-only approach has to much gaps.
3. Social links vs embeds: You're right. A link to Twitter isn't a dependency. An embed is. Will differentiate.
4. gov.uk/gov.cn perfect scores: The tool checks infrastructure, not jurisdiction. gov.uk probably serves from EU edge nodes. That said, the name. Also tried to mention this in the Methodology-Modal. But iterating on all legalese and features same time as a single dev did not land well with my sleeping patterns for v0.1. Will fix that too.
"EU sovereignty" is misleading for non-EU countries - point taken. Will think about better framings.