w3c fingerprinting-guidance issues

w3c / fingerprinting-guidance

What is browser fingerprinting and how should specification authors address it.

https://w3c.github.io/fingerprinting-guidance/

52 stars 14 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Concrete examples re: features for responsive design

#56 npdoty opened 8 months ago
0
Remove reference to browser.display.max_font

#55 jonathanKingston opened 9 months ago
0
how should we consider cumulative impacts of additions to fingerprinting surface?

#54 npdoty opened 1 year ago
0
Replace accessible with available

#50 sandandsnow closed 2 years ago
2
Set up auto-publish

#49 plehegar opened 2 years ago
3
"Availability", not "accessibility"

#48 fredrika11y opened 2 years ago
0
Mention (capability) negotiation?

#47 samuelweiler opened 3 years ago
1
use automatic publishing

#46 samuelweiler opened 3 years ago
0
Needs to recognise a broader set of stakeholders and concerns - focus on the harm not the method

#45 jwrosewell opened 3 years ago
3
Should include mention of ephemeral fingerprinting

#44 JensenPaul opened 4 years ago
4
should we further mitigate threats of identifiers in local storage because some mechanisms won't clear all local storage?

#43 npdoty opened 4 years ago
0
Should we recommend Client Hints as method for converting passive surfaces to active?

#42 JensenPaul opened 4 years ago
1
Clarify "Fingerprinting mitigation levels of success"

#41 JensenPaul opened 4 years ago
0
Should we add a warning about entropy?

#40 JensenPaul opened 4 years ago
1
Replace white/blacklist with better terms.

#39 jyasskin closed 4 years ago
3
Add "concealing mitigations" to mitigations

#38 KOLANICH opened 4 years ago
1
Best practice style change

#37 marcoscaceres opened 5 years ago
0
Best practices black background

#36 marcoscaceres closed 5 years ago
5
change to github ID (from w3c ID)

#35 samuelweiler closed 5 years ago
0
Create w3c.json

#34 samuelweiler closed 5 years ago
0
backport minor changes

#33 samuelweiler opened 5 years ago
0
correct date of previous version

#32 samuelweiler closed 5 years ago
0
fix some broken links

#31 samuelweiler closed 5 years ago
0
change some http to https URLs

#30 samuelweiler closed 5 years ago
0
add reference to current privacy/security questionnaire

#29 npdoty closed 5 years ago
0
Document duplication of fingerprinting surface if it appears at multiple places

#28 jumde closed 5 years ago
1
Fingerprinting through timing channels

#27 pes10k closed 5 years ago
0
Discuss impact of revealing hardware information to the web vis-a-vis entropy disclosed.

#26 jasonanovak closed 5 years ago
2
Reference INRIA’s Hiding in the Crowd: an Analysis of the Effectiveness of Browser Fingerprinting at Large Scale?

#25 jasonanovak closed 5 years ago
1
Additional Example for Best Practice 5

#24 jasonanovak closed 5 years ago
2
Explain how using a standard value has a side benefit - increasing the anonymity set.

#23 jasonanovak closed 5 years ago
1
Example for Best Practice 2?

#22 jasonanovak closed 5 years ago
2
Role of prompting as mitigation

#21 jasonanovak closed 5 years ago
2
Refine definition of fingerprinting to exclude entropy behind a prompt?

#20 jasonanovak opened 5 years ago
2
move some hyperlinks to references?

#19 samuelweiler closed 5 years ago
4
add code example for fingerprint icon

#18 samuelweiler closed 5 years ago
5
Move "why is Tor not enough" elsewhere

#17 samuelweiler closed 5 years ago
0
new paper citation for research section: Hiding in the Crowd

#16 npdoty closed 5 years ago
0
Provide advice on whether this spec. exposes similar information

#15 dwsinger closed 5 years ago
1
Export the "fingerprinting surface" definition.

#14 jyasskin closed 6 years ago
2
actionability through a decision tree or other

#13 npdoty closed 5 years ago
6
cookie-like vs. active and passive categories

#12 npdoty closed 5 years ago
4
providing hooks for instrumentation/detection of fingerprinting

#11 npdoty closed 5 years ago
7
3rd parties collusion and user tracking

#10 noloader closed 7 years ago
1
Reconcile TAG feedback

#9 slightlyoff closed 5 years ago
2
Predictive text and complete loss of privacy

#8 noloader closed 7 years ago
3
additional existing fingerprinting vectors to mention

#7 noloader closed 5 years ago
1
More specific examples/guidance

#6 npdoty closed 5 years ago
4
title of the document should clarify mitigation

#5 npdoty closed 7 years ago
4
"correlation" vs. "identification" vs. "linking"

#4 npdoty closed 5 years ago
1