From efd4b3b9dc85293b99429311948640f532fd7dfe Mon Sep 17 00:00:00 2001
From: Marc Gravell <marc.gravell@gmail.com>
Date: Mon, 24 Aug 2026 11:57:58 +0100
Subject: [PATCH] Stop naming the protoc host in the UI

Three places named it: the language group, the note beside the language bar and
the footer, with the header badge naming it too. None of them needed to. What a
user has to know is that this one target leaves the browser, which the wording
still says; where it goes is an implementation detail, and printing it on every
page is an invitation to point traffic at it directly.

The messages shown when the service cannot be reached lose the hostname for the
same reason. Source comments keep it, since that audience needs to know.
---
 web/index.html    | 12 ++++++------
 web/src/protoc.ts |  2 +-
 web/src/schema.ts |  6 +++---
 3 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/web/index.html b/web/index.html
index 8a12d7e..1dee467 100644
--- a/web/index.html
+++ b/web/index.html
@@ -40,14 +40,15 @@
                 <option value="vb">VB.NET</option>
               </optgroup>
               <!-- filled from PROTOC_LANGUAGES, so the picker and the service cannot disagree -->
-              <optgroup label="protoc — on protoc.protobuf-net.dev" id="opt-language-protoc"></optgroup>
+              <optgroup label="protoc — compiled on a server" id="opt-language-protoc"></optgroup>
             </select>
           </label>
           <button type="button" class="ghost remote-only" id="run-protoc">Generate</button>
+          <!-- the host is deliberately not named here or in the footer; what the user needs to
+               know is that this one leaves the browser, not where it goes -->
           <span class="note remote-only">
-            compiled by <code>protoc</code> on
-            <a href="https://protoc.protobuf-net.dev" rel="noopener">protoc.protobuf-net.dev</a> —
-            your schema is sent there when you press Generate
+            compiled with <code>protoc</code> — your schema is sent to a server when you press
+            Generate
           </span>
           <label id="opt-langver-wrap" class="net-only">
             Version
@@ -137,8 +138,7 @@
       <span id="engine-version">loading engine…</span>
       <span>
         C#, VB.NET and payload decoding run in your browser via WebAssembly and are never uploaded.
-        protoc's own languages are compiled on
-        <a href="https://protoc.protobuf-net.dev" rel="noopener">protoc.protobuf-net.dev</a>.
+        protoc's own languages are compiled with <code>protoc</code> on a server.
       </span>
     </footer>
 
diff --git a/web/src/protoc.ts b/web/src/protoc.ts
index 689b9af..bd39410 100644
--- a/web/src/protoc.ts
+++ b/web/src/protoc.ts
@@ -69,7 +69,7 @@ export function readResponse(status: number, body: string): GenerateResponse {
 
   if (!parsed || !Array.isArray(parsed.files) || !Array.isArray(parsed.errors)) {
     const detail = body.trim().slice(0, 200) || '(no detail)';
-    return { files: [], errors: [], exception: `protoc.protobuf-net.dev replied ${status}: ${detail}` };
+    return { files: [], errors: [], exception: `the protoc service replied ${status}: ${detail}` };
   }
   return { files: parsed.files, errors: parsed.errors, ...(parsed.exception ? { exception: parsed.exception } : {}) };
 }
diff --git a/web/src/schema.ts b/web/src/schema.ts
index 112b581..3aa071d 100644
--- a/web/src/schema.ts
+++ b/web/src/schema.ts
@@ -154,11 +154,11 @@ export function initSchemaView(): void {
 
     // the decoder is local whatever the schema view is set to, so it wins while it is on screen
     const remote = protoc !== undefined && location.hash.replace('#', '') !== 'decode';
-    privacyBadge.textContent = remote ? 'uses protoc.protobuf-net.dev' : 'runs locally';
+    privacyBadge.textContent = remote ? 'compiled on a server' : 'runs locally';
     privacyBadge.setAttribute(
       'title',
       remote
-        ? 'protoc is a native compiler: pressing Generate sends this schema to protoc.protobuf-net.dev'
+        ? 'protoc is a native compiler and cannot run in the browser: pressing Generate sends this schema to a server'
         : 'Nothing you paste leaves your browser',
     );
   }
@@ -207,7 +207,7 @@ export function initSchemaView(): void {
     } catch (error) {
       // an abort is this code superseding itself, and has nothing to report
       if (controller.signal.aborted || token !== generation) return;
-      renderMessages(messages, [], `could not reach protoc.protobuf-net.dev: ${String(error)}`);
+      renderMessages(messages, [], `could not reach the protoc service: ${String(error)}`);
       markStale('outdated — press Generate');
     } finally {
       if (token === generation) {