Solid server will fetch any thing on the web: is it even legal to run it?

1

Solid servers may fetch the user’s webid document to confirm the identity provider if it is not the same host name, and will fetch the public keys for all identity providers (to check the access token). Identity providers will also fetch client registration documents.

Any user can in fact make the Solid server connect to any other server. What if a malicious user makes my server connect to a website that is illegal to even visit (for instance, one hosting child pornography or terrorist propaganda)? Has anyone ever been in this situation? Are there recommendations for self-hosting a Solid server in this regard?

2

I’m not a lawyer, but given that I can just insert an image tag here that will make your browser go fetch whatever website, I don’t think that that’s actually a problem anywhere.

1 Like
3

I can just insert an image tag here that will make your browser go fetch whatever website

I see your point. This forum would also share a big chunk of the responsibility because it publishes this link, but noone would know that and I would be in the same situation.