Coder Social home page Coder Social logo

Comments (3)

pes10k avatar pes10k commented on June 28, 2024 4

Hi @ron-wolf , thank you for opening the issue. I dont think Brave will pursue a ITP like approach, mainly because Brave's protections are currently strictly stronger than ITP in nearly all cases (and that we're building other approaches for the small remaining differences).

ITP broadly does three things (there are some other aspects too, but they're mostly about escape valves for the below)

  1. Control who can have third party storage, and for what life time. ITP is a heuristic for who gets limited 3p storage. Brave blocks 3p storage across the board (with a very few minor web compat exceptions, that are limited to 1p-3p pairs, and which we have an underdevelopment approach to shrink further)
  2. A tricky, very conservative heuristic for stripping tracking parameters from expected bounce trackers. Brave maintains a set of known tracking-related query parameters already that we strip off universally (i.e. we dont rely on the loosey heuristic). https://brave.com/whats-brave-done-for-my-privacy-lately-episode5/ has more detail if you're interested
  3. Restricting the Life-time of JS accessible storage in the first party context. Brave currently already caps the lifetime of all JS set cookies in the first party context (and blocks all storage in the third-party context), and we're looking to see if we can be further aggressive here (so localStorage, indexDB, etc).

If its of interest, brave/brave-browser#8514 covers the approach we're pursuing to remove the few remaining 3p storage exceptions.

But, the main takeaway is that adopting ITP would reduce Brave's privacy protections, and result in re-enabling some forms of tracking, which we're of course not interested in doing :).

Hope that helps!

from adblock-rust.

pes10k avatar pes10k commented on June 28, 2024 1

@ron-wolf thanks much for the kind words and the offer! It'll probably be 2-3 months before we have a useful version of brave/brave-browser#8514 in nightly (its a very large, complex change from how Chromium handles things), but if you're interested then, we'd love to have more users testing it out and sharing their experiences with us!

from adblock-rust.

ron-wolf avatar ron-wolf commented on June 28, 2024

@pes10k Thanks for the patient and thorough explanation! Most sites have worked just fine with Brave, so I wrongly assumed Brave’s implementation was more conservative than, say, Safari’s. I don’t know too much about the implementation, but let me know if there’s anything I could help with regarding brave/brave-browser#8514!

from adblock-rust.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.