Security/Tracking protection: Difference between revisions
< Security
Jump to navigation
Jump to search
(→QA: how to produce digest256 hashes) |
(list all of the about:config prefs) |
||
| Line 6: | Line 6: | ||
https://intranet.mozilla.org/TrackingProtectionForFirefox | https://intranet.mozilla.org/TrackingProtectionForFirefox | ||
== Prefs == | |||
* <tt>browser.trackingprotection.updateURL</tt>: server endpoint for downloading list updates | |||
* <tt>browser.trackingprotection.gethashURL</tt>: server endpoint for completions | |||
* <tt>privacy.trackingprotection.enabled</tt>: to enable TP '''globally''' | |||
* <tt>privacy.trackingprotection.pbmode.enabled</tt>: to enable TP in '''Private Browsing mode''' (not needed if the global pref is enabled) | |||
* <tt>privacy.trackingprotection.ui.enabled</tt>: show a checkbox to toggle <tt>privacy.trackingprotection.enabled</tt> in the Preferences ('''Nightly''' only) | |||
* <tt>privacy.trackingprotection.introCount</tt> | |||
* <tt>privacy.trackingprotection.introURL</tt> | |||
* <tt>urlclassifier.trackingTable</tt>: list of Safe Browsing tables to use when looking for trackers (they need to be named <tt>*-track-*</tt>) | |||
== Engineering == | == Engineering == | ||
Revision as of 23:04, 6 August 2015
Description
Websites need to be able to deliver and monetize the content they create. Users want more protection from online tracking. Tracking Protection is a new platform-level technology that blocks HTTP loads at the network level. Coupled with a user-declared opt-out, such as Do Not Track, we will explore various paths that can provide users with more safety while allowing websites to reliably deliver ads that meet or exceed consumer's tracking preferences.
This feature is part of the Polaris initiative.
https://intranet.mozilla.org/TrackingProtectionForFirefox
Prefs
- browser.trackingprotection.updateURL: server endpoint for downloading list updates
- browser.trackingprotection.gethashURL: server endpoint for completions
- privacy.trackingprotection.enabled: to enable TP globally
- privacy.trackingprotection.pbmode.enabled: to enable TP in Private Browsing mode (not needed if the global pref is enabled)
- privacy.trackingprotection.ui.enabled: show a checkbox to toggle privacy.trackingprotection.enabled in the Preferences (Nightly only)
- privacy.trackingprotection.introCount
- privacy.trackingprotection.introURL
- urlclassifier.trackingTable: list of Safe Browsing tables to use when looking for trackers (they need to be named *-track-*)
Engineering
List
- Upstream list (how it's created)
- List conversion script
- Allow list
- List policy
- The list is stored in these files:
- ~/.cache/mozilla/firefox/XXXX/safebrowsing/mozpub-track-digest256.* on Linux
- ~/Library/Caches/Firefox/Profiles/XXXX/safebrowsing/mozpub-track-digest256.* on Mac
QA
- Test plan for Fx42
- Breakage bugs
- Ideas for a testing strategy
- Test page
- One and Done task
- Script to dump the contents of mozpub-track-digest256* files
To turn on debugging output, export the following environment variable:
NSPR_LOG_MODULES="UrlClassifierDbService:5,nsChannelClassifier:5"
To produce the "digest256" hash that sbdbdump -v will contain for example.com:
echo -n "example.com/" | sha256sum 7fc983ea552f7c8d153fc308d621eb4f52e84aa63ecccf3a735698a11a2a4a8d