1900929 - (ppa-experiment) [meta] Privacy-Preserving Attribution Measurement API Experiment

Status: NEW

(Core :: DOM: Core & HTML, enhancement)

Description

[Brendan Birdsong]

As outlined in https://github.com/mozilla/explainers/tree/main/ppa-experiment, we’d like to experiment with a lightweight version of a proposal for an in-browser attribution API from the PATCG.

The goal is to inform our work toward a cross-browser standard, and we’re starting with a simple solution (using an Origin Trial) that reports a simple aggregate count of conversions, with differential privacy noise added.

Comment 1

[philip]

This bug is open but this is mentioned in release notes and the feature is deployed? What ticket tracks the actual work done?

Comment 2

[philip]

Also, shouldn't this be in "Privacy: Anti-Tracking" and wouldn't that have triggered more rigorous oversight regarding how closely it follows Mozilla's mission statements re privacy?

Comment 3

[Emilio Cobos Álvarez (:emilio)]

Meta bugs can remain open after initial implementation to track defects and improvements. The setting was placed as per UX feedback, but if you think it'd be better somewhere else please file a bug so it can be discussed there :)

Comment 4

[philip]

(In reply to Emilio Cobos Álvarez (:emilio) from comment #3)

Meta bugs can remain open after initial implementation to track defects and improvements. The setting was placed as per UX feedback, but if you think it'd be better somewhere else please file a bug so it can be discussed there :)

I'm not talking about the setting, I'm talking about the bug category. I was told by your CTO that this feature was properly announced because this bugzilla item was opened. So I'm asking, how can I possibly know about upcoming privacy impacting features if they aren't filed in the Privacy bugzilla category.

Comment 5

[Erwan]

Why is this feature enabled by default? In my opinion and given the ethical objectives that Firefox advocates, this function should be disabled by default. At a minimum, during installation there should be an explicit window asking the user whether or not to enable it.