diff --git a/index.bs b/index.bs index 7efdddb..ed64f1c 100644 --- a/index.bs +++ b/index.bs @@ -12,7 +12,7 @@ Former Editor: Mike West 56384, Google LLC, mkwst@google.com Abstract: This document defines a set of Client Hints that aim to provide developers with the ability to perform agent-based content negotiation when necessary, while avoiding the historical baggage and - passive fingerprinting surface exposed by the venerable `User-Agent` header. + [=passive fingerprinting=] surface exposed by the venerable `User-Agent` header. Indent: 4 Default Biblio Status: current Markup Shorthands: css off, markdown on @@ -48,6 +48,12 @@ urlPrefix: https://wicg.github.io/client-hints-infrastructure/ urlPrefix: https://tc39.es/ecma262/ type: dfn text: current realm; url: #current-realm +urlPrefix: https://w3c.github.io/fingerprinting-guidance/ + type: dfn + text: passive fingerprinting; url: #dfn-passive-fingerprinting + text: active fingerprinting; url: #dfn-active-fingerprinting + text: Best Practice 1; url: #avoid-passive-increases +
{ @@ -134,7 +140,8 @@ Client Hints ([[!RFC8942]]) that can provide the client's branding and version information, the underlying operating system's branding and major version, as well as details about the underlying device. Rather than broadcasting this data to everyone, all the time, user agents can make reasonable decisions about how to respond to given sites' requests for more granular data, -reducing the passive fingerprinting surface area exposed to the network. +reducing the [=passive fingerprinting=] surface area exposed to the network (see [=Best Practice 1=] +in [[FINGERPRINTING-GUIDANCE]]). Examples {#examples} -------- @@ -547,7 +554,7 @@ Delegation {#delegation} Client Hints will be delegated from top-level pages via Permissions Policy. This reduces the likelihood that [=user agent=] information will be delivered along with subresource requests, which reduces the potential for -passive fingerprinting. +[=passive fingerprinting=]. That delegation is defined as part of [=append client hints to request=]. @@ -555,11 +562,11 @@ Fingerprinting {#fingerprinting} -------------- The primary goal of User Agent Client Hints is to reduce the default entropy -available to the network for passive fingerprinting. However, it will still be possible -for some, or all, hints to be requested and used for active fingerprinting purposes by +available to the network for [=passive fingerprinting=]. However, it will still be possible +for some, or all, hints to be requested and used for [=active fingerprinting=] purposes by first or delegated third parties. As noted in [[#access]], [=User agents=] should consider -policies to restrict or reduce access to parties that are known to actively -fingerprint their users. +policies to restrict or reduce access to parties that are known to +actively fingerprint their users. Access Restrictions {#access} -------------------