Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
Intent to Prototype: ETP Cookie Purging
216 views
Skip to first unread message
Johann Hofmann
Apr 9, 2020, 5:26:51 PM4/9/20
to dev-platform
In bug 1628743 <https://bugzilla.mozilla.org/show_bug.cgi?id=1628743> I
plan to enable ETP cookie purging by default on Nightly only, affecting
both desktop and mobile.
In short, ETP cookie purging is an attempt to protect against first-party
redirect (“bounce”) trackers by periodically clearing their site data. To
that effect, any site that is on our list of known trackers and did not
receive user interaction (including scrolling) in the last 30 days will
have all its cookies and other storage cleared during idle daily.
A similar technique is already being shipped in Safari as part of ITP
<https://webkit.org/blog/8311/intelligent-tracking-prevention-2-0/>.
Standardization of such a mechanism is currently being discussed in the
Privacy CG
<https://webkit.org/blog/8311/intelligent-tracking-prevention-2-0/>. Our
implementation is likely to be altered based on the outcome of that
discussion.
Our plan is to let this bake for at least the 77 cycle and evaluate for
bugs and potential breakage before we make a decision to ship in 78, or
later.
The preference to control this is privacy.purge_trackers.enabled.
Should you notice strange website behavior on Nightly that revolves around
state management (e.g. getting logged out of a site too frequently), please
file a bug blocking bug 1594226
<https://bugzilla.mozilla.org/show_bug.cgi?id=1594226>. We’re happy to
investigate further.
Please let me know if you have any questions or concerns.
Thanks,
Johann
plan to enable ETP cookie purging by default on Nightly only, affecting
both desktop and mobile.
In short, ETP cookie purging is an attempt to protect against first-party
redirect (“bounce”) trackers by periodically clearing their site data. To
that effect, any site that is on our list of known trackers and did not
receive user interaction (including scrolling) in the last 30 days will
have all its cookies and other storage cleared during idle daily.
A similar technique is already being shipped in Safari as part of ITP
<https://webkit.org/blog/8311/intelligent-tracking-prevention-2-0/>.
Standardization of such a mechanism is currently being discussed in the
Privacy CG
<https://webkit.org/blog/8311/intelligent-tracking-prevention-2-0/>. Our
implementation is likely to be altered based on the outcome of that
discussion.
Our plan is to let this bake for at least the 77 cycle and evaluate for
bugs and potential breakage before we make a decision to ship in 78, or
later.
The preference to control this is privacy.purge_trackers.enabled.
Should you notice strange website behavior on Nightly that revolves around
state management (e.g. getting logged out of a site too frequently), please
file a bug blocking bug 1594226
<https://bugzilla.mozilla.org/show_bug.cgi?id=1594226>. We’re happy to
investigate further.
Please let me know if you have any questions or concerns.
Thanks,
Johann
Johann Hofmann
Apr 20, 2020, 4:46:43 AM4/20/20
to dev-platform
Quick update that this has been live in Nightly since the end of last week
so I hope none of y'all have been inadvertently logged out so far.
Also a correction that the correct link to the Privacy CG discussion is
https://github.com/privacycg/proposals/issues/6. Thank you Emilio for
pointing this out.
Cheers,
Johann
so I hope none of y'all have been inadvertently logged out so far.
Also a correction that the correct link to the Privacy CG discussion is
https://github.com/privacycg/proposals/issues/6. Thank you Emilio for
pointing this out.
Cheers,
Johann
0 new messages