1990831 - Enable BTP "stateless" mode by default when BTP is active

Status: RESOLVED FIXED

(Core :: Privacy: Anti-Tracking, task, P1)

Description

[Emma Zühlcke [:emz]]

This is for setting the pref privacy.bounceTrackingProtection.requireStatefulBounces to false unconditionally here: https://searchfox.org/firefox-main/rev/529fecf1aff6e290cac16b106edfb656db6f5088/modules/libpref/init/StaticPrefList.yaml#16622-16626

Comment 1

[Emma Zühlcke [:emz]]

Attachment: Bug 1990831 - Set requireStatefulBounces to false by default. r=#anti-tracking!

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/2a94b2b475c6
https://hg.mozilla.org/integration/autoland/rev/4f874e994207
Set requireStatefulBounces to false by default. r=manuel

Comment 3

[Narcis Beleuzu [:NarcisB]]

https://hg.mozilla.org/mozilla-central/rev/4f874e994207

Comment 5

[Manuel Bucher [:manuel]]

I initially planned to write a MDN page on bounce tracking protection (potentially including stateless mode), but haven't done so in ~1 year and would like to delegate to technical writers.

Resources:

• Bounce tracking spec: https://privacycg.github.io/nav-tracking-mitigations/#bounce-tracking-mitigations
• Explainer: https://github.com/privacycg/nav-tracking-mitigations/blob/b28a3a7479f6f5c68ebfe344f53fb924cc093065/explainers/bounce-tracking-mitigations.md
• source-docs: https://firefox-source-docs.mozilla.org/toolkit/components/antitracking/anti-tracking/bounce-tracking-protection/
• Privacy sandbox: https://privacysandbox.google.com/protections/bounce-tracking-mitigations
• It is set to "Continue to support" in Chrome: https://privacysandbox.google.com/overview/status

Current MDN doc about redirect protection in Firefox: https://developer.mozilla.org/en-US/docs/Web/Privacy/Guides/Redirect_tracking_protection
We still do that, however the new mechanism is intended as a non-list based approach that works the same cross-browser. I think a page next to that one called "Bounce Tracking Protection" is desired.

The stateless variant got merged into the spec here: https://github.com/privacycg/nav-tracking-mitigations/pull/95. So we probably don't need to differentiate between stateful and stateless on the mdn page.

Thanks!

Comment 6

[Brian Thomas Smith [bsmth]]

(In reply to Manuel Bucher [:manuel] from comment #5)

I think a page next to that one called "Bounce Tracking Protection" is desired.

The MDN changes can be tracked here: https://github.com/mdn/content/issues/41819

Can you please check the guide at https://developer.mozilla.org/en-US/docs/Web/Privacy/Guides/Bounce_tracking_mitigations and provide feedback in the linked GitHub issue if there's any improvements or clarifications needed? Thank you!

Comment 7

[Chris Mills [:cmills]]

(In reply to Brian Thomas Smith [bsmth] from comment #6)

(In reply to Manuel Bucher [:manuel] from comment #5)

I think a page next to that one called "Bounce Tracking Protection" is desired.

The MDN changes can be tracked here: https://github.com/mdn/content/issues/41819

Can you please check the guide at https://developer.mozilla.org/en-US/docs/Web/Privacy/Guides/Bounce_tracking_mitigations and provide feedback in the linked GitHub issue if there's any improvements or clarifications needed? Thank you!

I've made changes to the article to add Firefox support details in https://github.com/mdn/content/pull/41950. I'd love your feedback on the article. Thanks!

Comment 8

[Manuel Bucher [:manuel]]

Provided feedback in https://github.com/mdn/content/pull/41950#pullrequestreview-3468039432

Comment 9

[Chris Mills [:cmills]]

Thanks, Manuel! I've responded to all your comments in the PR. Please let me know what you think of the updates.

Comment 10

[Manuel Bucher [:manuel]]

Responded in discussion and added a comment. Looks good overall :)

Comment 11

[Brian Thomas Smith [bsmth]]

Thanks, both! Setting to dev-doc-complete now.