[prev in list] [next in list] [prev in thread] [next in thread] 

List:       webkit-dev
Subject:    Re: [webkit-dev] Proposal: add Privacy to WebKit Project Goals
From:       Maciej Stachowiak <mjs () apple ! com>
Date:       2020-02-17 6:28:44
Message-ID: 11BE1A71-8FBF-46B6-910B-06B36A1D65D4 () apple ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


> On Feb 16, 2020, at 8:43 PM, Brent Fulgham <bfulgham@apple.com> wrote:
> 
> 
> 
> > On Feb 16, 2020, at 12:39 PM, Maciej Stachowiak <mjs@apple.com \
> > <mailto:mjs@apple.com>> wrote: 
> > 
> > There hasn't been any feedback on this, so below is a proposed change (in \
> > PrettyPatch HTML format) to <https://webkit.org/project/ \
> > <https://webkit.org/project/>>. 
> > In addition to adding Privacy as a goal, I also added Battery Life, and tweaked a \
> > few of the existing goals. 
> > Thoughts?
> > 
> > 
> > project-new.html
> > 
> > 32<h4><a name="privacy"></a>Privacy</h4>
> > 33<p>Users want their privacy respected. We avoid directly violating the user's \
> > privacy, and strive to prevent websites and other parties from doing so.</p>
> 
> The term "directly violating" sounds a little soft. Do we not care about indirect \
> privacy violations?

My intent was to express that the browser engine itself will not spy on you, in \
addition to our measures to prevent websites from doing so. I'm not sure what you \
think would count as indirectly violating the users privacy which would not be \
websites or other parties violating the user's privacy, but I'll try to reword it.

> 
> I don't know the right wording to use, but I would like to say something along the \
> lines of: 
> "Users want their privacy respected. We avoid violating the user's privacy, and \
> strive to prevent websites and other parties form doing so, too. We view the \
> UserAgent's primary responsibility to be protecting the interests of the user. We \
> therefore do not support or intend to implement web standards that are at odds with \
> these goals, or that create mechanisms to fingerprint or otherwise monitor user \
> behavior."

This seems unnecessarily combative. Also perhaps not entirely true. There's lots of \
fingerprinting surface in the web platform, and we have not removed all of it.

I'll make an attempt to write this more clearly.

 - Maciej


[Attachment #5 (unknown)]

<html><head><meta http-equiv="Content-Type" content="text/html; \
charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; \
line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote \
type="cite" class=""><div class="">On Feb 16, 2020, at 8:43 PM, Brent Fulgham &lt;<a \
href="mailto:bfulgham@apple.com" class="">bfulgham@apple.com</a>&gt; wrote:</div><br \
class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" \
content="text/html; charset=utf-8" class=""><div style="word-wrap: break-word; \
-webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div \
class=""><br class=""><blockquote type="cite" class=""><div class="">On Feb 16, 2020, \
at 12:39 PM, Maciej Stachowiak &lt;<a href="mailto:mjs@apple.com" \
class="">mjs@apple.com</a>&gt; wrote:</div><br class="Apple-interchange-newline"><div \
class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; \
-webkit-line-break: after-white-space;" class=""><br class=""><div class="">There \
hasn't been any feedback on this, so below is a proposed change (in PrettyPatch HTML \
format) to &lt;<a href="https://webkit.org/project/" \
class="">https://webkit.org/project/</a>&gt;.</div><div class=""><br \
class=""></div><div class="">In addition to adding Privacy as a goal, I also added \
Battery Life, and tweaked a few of the existing goals.</div><div class=""><br \
class=""></div><div class="">Thoughts?</div><div class=""><br class=""></div><div \
class=""><br class=""></div><div class=""><h1 style="color: rgb(51, 51, 51); \
font-family: sans-serif; font-size: 1em; margin-left: 0.5em; display: inline; width: \
100%; padding: 0.5em; background-color: rgb(248, 248, 248);" \
class="">project-new.html</h1><span style="font-family: monospace; font-size: \
inherit; background-color: rgb(248, 248, 248);" class=""></span><div \
class="DiffSection" style="border: solid var(--border-color); font-family: \
monospace;"><div class="DiffBlock"><div class="DiffBlockPart shared"><div class="Line \
LineContainer" style="white-space: nowrap;"><br class=""></div></div></div></div><div \
class="DiffSection" style="border: solid var(--border-color); font-family: \
monospace;"><div class="DiffBlock"><div class="clear_float" style="clear: \
both;"></div></div><div class="DiffBlock"><div class="DiffBlockPart add" \
style="background-color: rgb(221, 255, 221);"><div class="add Line LineContainer" \
style="white-space: nowrap;"><span class="lineNumber from" \
style="--border-bottom-color:  #998; border-bottom: 1px solid \
var(--border-bottom-color); border-right: 1px solid var(--border-color); color: \
rgb(68, 68, 68); display: inline-block; padding: 1px 5px 0px 0px; text-align: right; \
vertical-align: bottom; width: 3em; background-color: rgb(238, 238, \
221);">&nbsp;</span><span class="to lineNumber" style="--border-bottom-color:  #998; \
border-bottom: 1px solid var(--border-bottom-color); border-right: 1px solid \
var(--border-color); color: rgb(68, 68, 68); display: inline-block; padding: 1px 5px \
0px 0px; text-align: right; vertical-align: bottom; width: 3em; background-color: \
rgb(238, 238, 221);">32</span><span class="text" style="padding-left: 5px; \
white-space: pre-wrap; word-wrap: break-word;">&lt;h4&gt;&lt;a \
name="privacy"&gt;&lt;/a&gt;Privacy&lt;/h4&gt;</span></div><div class="add Line \
LineContainer" style="white-space: nowrap;"><span class="lineNumber from" \
style="--border-bottom-color:  #998; border-bottom: 1px solid \
var(--border-bottom-color); border-right: 1px solid var(--border-color); color: \
rgb(68, 68, 68); display: inline-block; padding: 1px 5px 0px 0px; text-align: right; \
vertical-align: bottom; width: 3em; background-color: rgb(238, 238, \
221);">&nbsp;</span><span class="to lineNumber" style="--border-bottom-color:  #998; \
border-bottom: 1px solid var(--border-bottom-color); border-right: 1px solid \
var(--border-color); color: rgb(68, 68, 68); display: inline-block; padding: 1px 5px \
0px 0px; text-align: right; vertical-align: bottom; width: 3em; background-color: \
rgb(238, 238, 221);">33</span><span class="text" style="padding-left: 5px; \
white-space: pre-wrap; word-wrap: break-word;">&lt;p&gt;Users want their privacy \
respected. We avoid directly violating the user's privacy, and strive to prevent \
websites and other parties from doing so.&lt;/p&gt;</span></div></div><div \
class="clear_float" style="clear: \
both;"></div></div></div></div></div></div></blockquote><br class=""></div><div \
class="">The term "directly violating" sounds a little soft. Do we not care about \
indirect privacy violations?</div></div></div></blockquote><div><br \
class=""></div><div>My intent was to express that the browser engine itself will not \
spy on you, in addition to our measures to prevent websites from doing so. I'm not \
sure what you think would count as indirectly violating the users privacy which would \
not be websites or other parties violating the user's privacy, but I'll try to reword \
it.</div><br class=""><blockquote type="cite" class=""><div class=""><div \
style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: \
after-white-space;" class=""><div class=""><br class=""></div><div class="">I don't \
know the right wording to use, but I would like to say something along the lines \
of:</div><div class=""><br class=""></div><div class="">"Users want their privacy \
respected. We avoid violating the user's privacy, and strive to prevent websites and \
other parties form doing so, too. We view the UserAgent's primary responsibility to \
be protecting the interests of the user. We therefore do not support or intend to \
implement web standards that are at odds with these goals, or that create mechanisms \
to fingerprint or otherwise monitor user behavior."</div></div></div></blockquote><br \
class=""></div><div>This seems unnecessarily combative. Also perhaps not entirely \
true. There's lots of fingerprinting surface in the web platform, and we have not \
removed all of it.</div><div><br class=""></div><div>I'll make an attempt to write \
this more clearly.</div><div><br class=""></div><div>&nbsp;- Maciej</div><div><br \
class=""></div></body></html>



_______________________________________________
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic