Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixes #214 - Add (non-normative) references to [[FINGERPRINTING-GUIDANCE]] #218

Merged
merged 1 commit into from
Mar 25, 2021
Merged

Fixes #214 - Add (non-normative) references to [[FINGERPRINTING-GUIDANCE]] #218

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 14 additions & 7 deletions index.bs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ Former Editor: Mike West 56384, Google LLC, [email protected]
Abstract:
This document defines a set of Client Hints that aim to provide developers with the ability to
perform agent-based content negotiation when necessary, while avoiding the historical baggage and
passive fingerprinting surface exposed by the venerable `User-Agent` header.
[=passive fingerprinting=] surface exposed by the venerable `User-Agent` header.
Indent: 4
Default Biblio Status: current
Markup Shorthands: css off, markdown on
Expand Down Expand Up @@ -48,6 +48,12 @@ urlPrefix: https://wicg.github.io/client-hints-infrastructure/
urlPrefix: https://tc39.es/ecma262/
type: dfn
text: current realm; url: #current-realm
urlPrefix: https://w3c.github.io/fingerprinting-guidance/
type: dfn
text: passive fingerprinting; url: #dfn-passive-fingerprinting
text: active fingerprinting; url: #dfn-active-fingerprinting
text: Best Practice 1; url: #avoid-passive-increases

</pre>
<pre class="biblio">
{
Expand Down Expand Up @@ -134,7 +140,8 @@ Client Hints ([[!RFC8942]]) that can provide the client's branding and version
information, the underlying operating system's branding and major version, as well as details about
the underlying device. Rather than broadcasting this data to everyone, all the time, user agents can
make reasonable decisions about how to respond to given sites' requests for more granular data,
reducing the passive fingerprinting surface area exposed to the network.
reducing the [=passive fingerprinting=] surface area exposed to the network (see [=Best Practice 1=]
in [[FINGERPRINTING-GUIDANCE]]).

Examples {#examples}
--------
Expand Down Expand Up @@ -547,19 +554,19 @@ Delegation {#delegation}

Client Hints will be delegated from top-level pages via Permissions Policy. This reduces the likelihood that [=user agent=]
information will be delivered along with subresource requests, which reduces the potential for
passive fingerprinting.
[=passive fingerprinting=].

That delegation is defined as part of [=append client hints to request=].

Fingerprinting {#fingerprinting}
--------------

The primary goal of User Agent Client Hints is to reduce the default entropy
available to the network for passive fingerprinting. However, it will still be possible
for some, or all, hints to be requested and used for active fingerprinting purposes by
available to the network for [=passive fingerprinting=]. However, it will still be possible
for some, or all, hints to be requested and used for [=active fingerprinting=] purposes by
first or delegated third parties. As noted in [[#access]], [=User agents=] should consider
policies to restrict or reduce access to parties that are known to actively
fingerprint their users.
policies to restrict or reduce access to parties that are known to <a lt="active fingerprinting">
actively fingerprint</a> their users.

Access Restrictions {#access}
-------------------
Expand Down