Open Bug 1152448 Opened 9 years ago Updated 2 years ago

"Forget About This Site" does not forget site's enumerateDevices Ids

Categories

(Core :: WebRTC: Audio/Video, defect, P3)

defect

Tracking

()

Tracking Status
firefox40 --- affected

People

(Reporter: jib, Unassigned, NeedInfo)

References

Details

(Keywords: privacy, Whiteboard: [fingerprinting][fp-triaged])

Unlike for cookies, selecting a site in the History panel and choosing "Forget About this Site", does not clear enumerateDevices's deviceIds for that site.

As such, someone may expect the site not to be able to identify them after having taken this action.

Need to add a SanitizeOriginKey(origin) method for this.
backlog: --- → webRTC+
Rank: 25
Priority: -- → P2
Mass change P2->P3 to align with new Mozilla triage process.
Priority: P2 → P3
Keywords: privacy
Whiteboard: [fingerprinting]
Yeah, this is a great example for the sort of issue that bug 1422365 is supposed to fix.
See Also: → 1422365
Whiteboard: [fingerprinting] → [fingerprinting][fp-triaged]
If someone ends up doing this, it would be best to add a deleteByHost or deleteByPrincipal method that calls into the platform code here: https://searchfox.org/mozilla-central/rev/5117a4c4e29fcf80a627fecf899a62f117368abf/toolkit/components/cleardata/ClearDataService.js#265

johann, worksforme: I don't see a per site forget anymore, it's just everything time based

The other one to consider is padlock>clear cookies and site data: that doesn't clear the id (i.e the tab stays open, clear, reload tab), but I don't know if that is in scope or in another issue somewhere

Flags: needinfo?(jhofmann)

jib, is this still valid?

Flags: needinfo?(jib)
Flags: needinfo?(jhofmann)
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.