Comments (3)
Hi @ron-wolf , thank you for opening the issue. I dont think Brave will pursue a ITP like approach, mainly because Brave's protections are currently strictly stronger than ITP in nearly all cases (and that we're building other approaches for the small remaining differences).
ITP broadly does three things (there are some other aspects too, but they're mostly about escape valves for the below)
- Control who can have third party storage, and for what life time. ITP is a heuristic for who gets limited 3p storage. Brave blocks 3p storage across the board (with a very few minor web compat exceptions, that are limited to 1p-3p pairs, and which we have an underdevelopment approach to shrink further)
- A tricky, very conservative heuristic for stripping tracking parameters from expected bounce trackers. Brave maintains a set of known tracking-related query parameters already that we strip off universally (i.e. we dont rely on the loosey heuristic). https://brave.com/whats-brave-done-for-my-privacy-lately-episode5/ has more detail if you're interested
- Restricting the Life-time of JS accessible storage in the first party context. Brave currently already caps the lifetime of all JS set cookies in the first party context (and blocks all storage in the third-party context), and we're looking to see if we can be further aggressive here (so localStorage, indexDB, etc).
If its of interest, brave/brave-browser#8514 covers the approach we're pursuing to remove the few remaining 3p storage exceptions.
But, the main takeaway is that adopting ITP would reduce Brave's privacy protections, and result in re-enabling some forms of tracking, which we're of course not interested in doing :).
Hope that helps!
from adblock-rust.
@ron-wolf thanks much for the kind words and the offer! It'll probably be 2-3 months before we have a useful version of brave/brave-browser#8514 in nightly (its a very large, complex change from how Chromium handles things), but if you're interested then, we'd love to have more users testing it out and sharing their experiences with us!
from adblock-rust.
@pes10k Thanks for the patient and thorough explanation! Most sites have worked just fine with Brave, so I wrongly assumed Brave’s implementation was more conservative than, say, Safari’s. I don’t know too much about the implementation, but let me know if there’s anything I could help with regarding brave/brave-browser#8514!
from adblock-rust.
Related Issues (20)
- Convert $all to $doc like uBO HOT 1
- support AdGuard scriptlet syntax HOT 1
- Will adblock-rust continue to work after Chrome Manifest V3? HOT 3
- `:style()` action operator doesn't work great with some `::-webkit-*` pseudo-classes, if other pseudo classes are used/need in the same rule.
- Support for `$specifichide`
- YouTube blocks default Brave now HOT 2
- Ag filters support of Brave Shields.
- Copyright confusion HOT 9
- Investigate using upstream `url` parser
- uBlock filter not working on Brave, works on Firefox + uBlock HOT 2
- Missing `from` support on `content_blocking.rs` causes crashes
- Wrong types for js bindings HOT 2
- Dependency Dashboard
- Return all filters which blocks the request HOT 1
- Allow specific YouTube channels with the AdBlock HOT 2
- crate.io website doc license tag needs an update
- `remove-attr`/`remove-class` regex/quoted syntax HOT 3
- `$to` support
- Element hiding rules (cosmetic filters) do not work with regex
- `removeparam` with no resource types should only apply to document, subdocument, and XHR HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from adblock-rust.