ISSUE-114: Guidance or mitigation of fingerprinting risk for user-agent-managed site-specific tracking exceptions

Guidance or mitigation of fingerprinting risk for user-agent-managed site-specific tracking exceptions

State:
CLOSED
Product:
Tracking Preference Expression (DNT)
Raised by:
Nick Doty
Opened on:
2012-01-06
Description:
By storing a client-side configurable state and providing functionality to query it later, this functionality may enable user fingerprinting and user tracking. We should either mitigate this concern (can we provide functionality without making fingerprinting of the user easier?) or provide guidance to implementers on how to minimize this risk.

See "Fingerprinting concerns".
Related Actions Items:
Related emails:
  1. Re: TPE sec 6.11 on clearing granted exceptions (from singer@apple.com on 2013-04-26)
  2. Re: TPE sec 6.11 on clearing granted exceptions (from npdoty@w3.org on 2013-04-25)
  3. Re: TPE sec 6.11 on clearing granted exceptions (from singer@apple.com on 2013-04-18)
  4. Re: Agenda for July 18, 2012 DNT WG Call on TPE (from fielding@gbiv.com on 2012-07-18)
  5. Issues mentioned in the TPE document, or non-closed in the database and applying to TPE (from singer@apple.com on 2012-04-10)
  6. Re: A First-Party List API for Site-Specific Exceptions (ISSUE-59, ISSUE-109, ISSUE-111, ISSUE-113, ISSUE-114) (from npdoty@w3.org on 2012-03-23)
  7. RE: A First-Party List API for Site-Specific Exceptions (ISSUE-59, ISSUE-109, ISSUE-111, ISSUE-113, ISSUE-114) (from kevsmith@adobe.com on 2012-03-23)
  8. RE: A First-Party List API for Site-Specific Exceptions (ISSUE-59, ISSUE-109, ISSUE-111, ISSUE-113, ISSUE-114) (from kevsmith@adobe.com on 2012-03-23)
  9. Re: A First-Party List API for Site-Specific Exceptions (ISSUE-59, ISSUE-109, ISSUE-111, ISSUE-113, ISSUE-114) (from jmayer@stanford.edu on 2012-03-17)
  10. Re: A First-Party List API for Site-Specific Exceptions (ISSUE-59, ISSUE-109, ISSUE-111, ISSUE-113, ISSUE-114) (from jmayer@stanford.edu on 2012-03-17)
  11. Re: A First-Party List API for Site-Specific Exceptions (ISSUE-59, ISSUE-109, ISSUE-111, ISSUE-113, ISSUE-114) (from npdoty@w3.org on 2012-03-17)
  12. RE: A First-Party List API for Site-Specific Exceptions (ISSUE-59, ISSUE-109, ISSUE-111, ISSUE-113, ISSUE-114) (from kevsmith@adobe.com on 2012-03-15)
  13. Re: A First-Party List API for Site-Specific Exceptions (ISSUE-59, ISSUE-109, ISSUE-111, ISSUE-113, ISSUE-114) (from sid@mozilla.com on 2012-03-14)
  14. Re: A First-Party List API for Site-Specific Exceptions (ISSUE-59, ISSUE-109, ISSUE-111, ISSUE-113, ISSUE-114) (from jmayer@stanford.edu on 2012-03-14)
  15. Re: A First-Party List API for Site-Specific Exceptions (ISSUE-59, ISSUE-109, ISSUE-111, ISSUE-113, ISSUE-114) (from sid@mozilla.com on 2012-03-14)
  16. RE: A First-Party List API for Site-Specific Exceptions (ISSUE-59, ISSUE-109, ISSUE-111, ISSUE-113, ISSUE-114) (from kevsmith@adobe.com on 2012-03-14)
  17. A First-Party List API for Site-Specific Exceptions (ISSUE-59, ISSUE-109, ISSUE-111, ISSUE-113, ISSUE-114) (from jmayer@stanford.edu on 2012-03-14)
  18. Re: ISSUE-111 - Exceptions are broken (from jmayer@stanford.edu on 2012-03-13)
  19. Issue Cleanup for TPE Document (from mts@zurich.ibm.com on 2012-03-06)
  20. JS Exception API (from tom@mozilla.com on 2012-02-29)
  21. Action-91: Write text on fingerprinting risk (ISSUE-109, ISSUE-114), with Nick Doty (from andyzei@microsoft.com on 2012-02-29)
  22. diff of TPE editing since the FPWD (from fielding@gbiv.com on 2012-01-10)
  23. tracking-ISSUE-114: Guidance or mitigation of fingerprinting risk for user-agent-managed site-specific tracking exceptions [Tracking Preference Expression (DNT)] (from sysbot+tracker@w3.org on 2012-01-06)

Related notes:

Added in r1.96 and r1.97

Roy Fielding, 7 Mar 2012, 13:42:25

2012-03-14: Changed to closed (no objections against closing:
http://www.w3.org/mid/4F5607C5.50208@zurich.ibm.com

Matthias Schunter, 14 Mar 2012, 10:06:09

Display change log ATOM feed


Matthias Schunter <matthias.schunter@intel.com>, Chair, Bert Bos <bert@w3.org>, Staff Contact
Tracker: documentation, (configuration for this group), originally developed by Dean Jackson, is developed and maintained by the Systems Team <w3t-sys@w3.org>.
$Id: index.php,v 1.326 2018/10/13 17:29:51 vivien Exp $