Skip to content

Commit

Permalink
Privacy Pass positions
Browse files Browse the repository at this point in the history
1. Remove the position on privacy pass as a whole
2. Update the Private State Token (formerly Trust Token; Google) position to reflect conclusions
3. Add a position on Private Access Tokens (Apple)

Closes mozilla#261.
Closes mozilla#262.
Closes mozilla#954.
  • Loading branch information
martinthomson committed Jan 8, 2024
1 parent c45dfd8 commit 16bb830
Showing 1 changed file with 30 additions and 16 deletions.
46 changes: 30 additions & 16 deletions activities.json
Original file line number Diff line number Diff line change
Expand Up @@ -1185,6 +1185,19 @@
"title": "Priority Hints",
"url": "https://wicg.github.io/priority-hints/"
},
{
"ciuName": null,
"description": "Private Access Tokens is the name given to the <a href=https://developer.apple.com/news/?id=huqjyh7k>integration</a> of Privacy Pass mechanism into Apple's networking stack.",
"id": "private-access-tokens",
"mdnUrl": null,
"mozBugUrl": null,
"mozPosition": "negative",
"mozPositionDetail": "This application of Privacy Pass fairly closely follows the IETF specification, but the integration with the Web means that the effect is of a proprietary deployment. A number of considerations relevant to use on the Web have not been adequately addressed in the deployment.",
"mozPositionIssue": 954,
"org": "Proposal",
"title": "Private Access Tokens",
"url": "https://datatracker.ietf.org/doc/html/draft-ietf-privacypass-auth-scheme"
},
{
"ciuName": null,
"description": "This specification defines a privacy preserving way to attribute a conversion, such as a purchase or a sign-up, to a previous ad click.",
Expand All @@ -1210,6 +1223,19 @@
"title": "Private Network Access",
"url": "https://wicg.github.io/private-network-access/"
},
{
"ciuName": null,
"description": "The Private State Token API is a web platform API that allows propagating a limited amount of signals across sites, using the Privacy Pass protocol as an underlying primitive.",
"id": "",
"mdnUrl": null,
"mozBugUrl": null,
"mozPosition": "under consideration",
"mozPositionDetail": null,
"mozPositionIssue": null,
"org": "Proposal",
"title": "Private State Token API",
"url": "https://wicg.github.io/trust-token-api/"
},
{
"ciuName": null,
"description": "Powerful web applications would like to exchange data with native applications via the OS clipboard (copy-paste). The existing Web Platform has a high-level API that supports the most popular standardized data types (text, image, rich text) across all platforms. However, this API does not scale to the long tail of specialized formats. In particular, non-web-standard formats like TIFF (a large image format), and proprietary formats like .docx (a document format), are not supported by the current Web Platform. Raw Clipboard Access aims to provide a low-level API solution to this problem, by implementing copying and pasting of data with any arbitrary Clipboard type, without encoding and decoding.",
Expand Down Expand Up @@ -1495,18 +1521,6 @@
"title": "The Popover API",
"url": "https://github.com/whatwg/html/pull/8221"
},
{
"ciuName": null,
"description": "This document specifies the Privacy Pass protocol for anonymously authorizing clients with services on the Internet. Note to Readers Source for this draft and an issue tracker can be found at https://github.com/grittygrease/draft-privacy-pass [1].",
"id": "privacy-pass",
"mozBugUrl": null,
"mozPosition": "defer",
"mozPositionDetail": "This protocol provides a way to achieve certain important goals, such as denial of service mitigation, without also creating tracking mechanisms. As such, we are very supportive of the goal. However, we will defer making a firm position until the protocol and the novel cryptographic primitives it relies on have had more thorough security analysis.",
"mozPositionIssue": 261,
"org": "Proposal",
"title": "The Privacy Pass Protocol",
"url": "https://tools.ietf.org/html/draft-privacy-pass"
},
{
"ciuName": null,
"description": "The goal of the Topics API is to provide callers with coarse-grained advertising topics that the page visitor might currently be interested in.",
Expand Down Expand Up @@ -1559,13 +1573,13 @@
{
"ciuName": null,
"description": "This document is an explainer for a potential future web platform API that allows propagating trust across sites, using the Privacy Pass protocol as an underlying primitive.",
"id": "trust-token",
"id": "private-state-token",
"mozBugUrl": null,
"mozPosition": "defer",
"mozPositionDetail": "This API depends on the Privacy Pass protocol, for which we have deferred our position statement.",
"mozPosition": "negative",
"mozPositionDetail": "Private State Tokens provides sites with the means to exchange information about visitors, using Privacy Pass to ensure that there are very tight bounds on the rate of information transfer. We conclude that the usage constraints in the design are insufficient to effectively safeguard privacy.",
"mozPositionIssue": 262,
"org": "Proposal",
"title": "Trust Token API",
"title": "Private State Token API",
"url": "https://github.com/WICG/trust-token-api/blob/master/README.md"
},
{
Expand Down

1 comment on commit 16bb830

@zcorpan
Copy link

@zcorpan zcorpan commented on 16bb830 Jan 8, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't see a PR for this change.

Please sign in to comment.