Expand on the privacy risks of proxy handling.

WICG / private-network-access

https://wicg.github.io/private-network-access/

Other

57 stars 22 forks source link

Expand on the privacy risks of proxy handling. #60

Closed letitz closed 3 years ago

letitz commented 3 years ago

@sleevi, can you PTAL?

Issue: #52

sleevi commented 3 years ago

Why does this only apply to non-totally-opaque? I thought (perhaps incorrectly) that opaque responses still revealed network-error-or-not?

letitz commented 3 years ago

Good question! I think I'm a bit confused. It's true that fetch() will throw a TypeError: failed to fetch allowing one to check if the request was successful or not. If it does not, then the website can say for certain that it was not blocked by PNA, so it's probably loaded via a non-public proxy. I'll remove that qualifier.

letitz commented 3 years ago

@sleevi can you PTAQL?

letitz commented 3 years ago

No worries, thanks for the review! Much appreciated :)