Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature Request] Popup informing users about risky web technologies. #1714

Closed
4 tasks done
Redo11 opened this issue Dec 29, 2024 · 5 comments
Closed
4 tasks done

[Feature Request] Popup informing users about risky web technologies. #1714

Redo11 opened this issue Dec 29, 2024 · 5 comments
Labels
awaiting info Further information is requested Stale I'm about to be closed, if there is no activity

Comments

@Redo11
Copy link

Redo11 commented Dec 29, 2024

Preliminary checklist

  • I have read the README
  • I have searched existing issues for my feature request. This is a new issue (NOT a duplicate) and is not related to another issue.
  • I have searched wont fix issues and this request is not among them
  • This is a feature request for the Cromite browser; not the website nor F-Droid nor anything else.

Is your feature request related to privacy?

Yes

Is there a patch available for this feature somewhere?

I don't believe so.

Describe the solution you would like

First of all, by risky features, I mean stuff like WebGL, WebGPU, WebASM, WebRTC, peer-to-peer and such.

These technologies make modern web more awesome, but come with a few problems. Most of all, fingerprinting. A lot of fingerprinting identifiers can be extracted through those technologies. There is also an issue of security, as enabling these features creates a bigger attack vector.

My proposal:
Add all these features and other risky web technologies to permission toggles and allow users to define a default profile.
This way, these features can be toggled on and off on per website basis and users with more privacy and security needs can close off a lot of potential vulnerabilities.

Describe alternatives you have considered

Disabling them in the browser completely, but that would create a problem, where certain websites cannot work properly and the user has no option to fix that, if desired.

@uazo
Copy link
Owner

uazo commented Jan 2, 2025

This way, these features can be toggled on and off on per website basis and users with more privacy and security needs can close off a lot of potential vulnerabilities.

I don't understand, it is already like that.
all those APIs identified as ‘risky’ and which you have indicated are deactivated by default, but you can reactivate them for websites via what the Chromium team calls content settings, accessible via the ‘Page info’ button:
image

@uazo uazo added the awaiting info Further information is requested label Jan 2, 2025
@Redo11
Copy link
Author

Redo11 commented Jan 3, 2025

I did not notice, I'm sorry. My issue may still be somewhat relevant as when the user enters a website that uses these technologies it doesn't inform the user about why the website might be broken.

How about creating a popup that shows up when the user enters a website with these technologies for the first time.
Such popup would allow to set the permissions for such website, inform the user about potential risks and downsides and provide an option to "Show popup every time" when such tech is detected or "Disable the popup", so the user doesn't get bothered again.

This solution would inform the users, so they are more aware about privacy options, would lessen frustration, when a certain website doesn't work properly and would leave power users relatively unbothered.

@Redo11 Redo11 changed the title Risky features added to per website permissions. [Feature Request] Popup informing users about risky web technologies. Jan 3, 2025
@uazo
Copy link
Owner

uazo commented Jan 3, 2025

This solution would inform the users

duplicate of #268

Copy link

github-actions bot commented Jan 9, 2025

This issue has been automatically marked as stale as there has been no recent activity in response to our request for more information. Please respond so that we can proceed with this issue.

@github-actions github-actions bot added the Stale I'm about to be closed, if there is no activity label Jan 9, 2025
Copy link

This issue has been automatically closed as sufficient information hasn't been provided on the issue for further actions to be taken. Feel free to add more information.

@github-actions github-actions bot closed this as not planned Won't fix, can't repro, duplicate, stale Jan 17, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
awaiting info Further information is requested Stale I'm about to be closed, if there is no activity
Projects
None yet
Development

No branches or pull requests

2 participants