Is failure reporting a privacy leak?
Open
Nobody has claimed this yet.
- Dominant language
- Bikeshed
- Stars
- 84
- Forks
- 39
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 1
Description
I stumbled across https://bugs.webkit.org/show_bug.cgi?id=244368 which made me think about this feature for a bit. It seems to me this could be used to determine something about the end user's network position, especially over a longer period of time.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Review the Reporting API behavior and the WebKit bug 244368 linked in the issue. Determine whether failure reporting can reveal an end user's network position over time, then document the privacy impact and any concrete follow-up requirement.
Written by the indexing model from the issue text.
Assessment
- Domain
- api, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100