search

mozilla / policy-templates

Policy Templates for Firefox
Mozilla Public License 2.0
1.14k stars 406 forks source link

How to configure Tracking Protection for suspected fingerprinters? #1149

Open htcfreek opened 3 weeks ago

htcfreek commented 3 weeks ago

How can I manage the settings for suspected fingerprinters of the tracking protection? Is there a updated policy? Because setting the preferences is not allowed.

Affected preferences: privacy.fingerprintingProtection & privacy.fingerprintingProtection.pbmode

image

FF version: 128.0.1 ESR

mkaply commented 3 weeks ago

There's a tracking protection policy to configure those

https://mozilla.github.io/policy-templates/#enabletrackingprotection

htcfreek commented 3 weeks ago

Is this a new single policy or do you mean the policies in the "Tracking Protection" folder/category? Because we enabled all policies (except "Exceptions" policy) in the tracking protection folder.

And as you can see all parts except the suspected fingerprinters are working as expected.

(Maybe there is another preference needed or only locking the ui does not work correctly.)

htcfreek commented 3 weeks ago

@mkaply Yes this policy exists. But as from the docs it does not manage the required preference privacy.fingerprintingProtection & privacy.fingerprintingProtection.pbmode.

(It only controls similar policies from the type privacy.trackingprotection.*.)

mkaply commented 3 weeks ago

Good callout. I didn't know the difference.

I'm wondering if I should just add privacy.fingerprintingProtection & privacy.fingerprintingProtection.pbmode to the existing Fingerprinting policy.

htcfreek commented 3 weeks ago

Good callout. I didn't know the difference.

I'm wondering if I should just add privacy.fingerprintingProtection & privacy.fingerprintingProtection.pbmode to the existing Fingerprinting policy.

Not sure. But privacy.fingerprintingProtection enables it and privacy.fingerprintingProtection.pbmode defines the behavior it uses. So maybe it requires a new policy with selection of "off", "on, all tabs" or "on, private browsing".

And don't forget to update the "lock ui" policy as it doesn't work too.

In the first step it would be great if we can set it using the preferences policy.

mkaply commented 3 weeks ago

For the policies, I pretty much ignore pbmode and do all or nothing for all the tracking protection.

https://searchfox.org/mozilla-central/source/browser/components/enterprisepolicies/Policies.sys.mjs#1092

I'd really rather just add this to the existing policy. I think I'm going to add something called "FingerprintingAttempts" that controls this pref.

htcfreek commented 3 weeks ago

@mkaply Can you estimate a time frame for when we can expect this to be solved in an ESR version?