Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Report Delivery #194

Open
annevk opened this issue Jan 13, 2020 · 3 comments
Open

Report Delivery #194

annevk opened this issue Jan 13, 2020 · 3 comments
Assignees
Labels
privacy-tracker Group bringing to attention of Privacy, or tracked by the Privacy Group but not needing response.

Comments

@annevk
Copy link
Member

annevk commented Jan 13, 2020

That said, a user agent SHOULD make a effort to deliver reports as soon as possible after queuing, as a report’s data might be significantly more useful in the period directly after its generation than it would be a day or a week later.

It seems there's privacy implications here that ought to be called out. As reporting later would reveal new things about the user.

@plehegar plehegar added privacy-tracker Group bringing to attention of Privacy, or tracked by the Privacy Group but not needing response. and removed privacy labels Feb 22, 2021
@clelland
Copy link
Contributor

clelland commented Mar 5, 2021

Besides knowing that the user had been on the page for a day (or a week,) which is pretty trivial for a site to know, are there other categories of info that you'd find specifically concerning?

The text there was originally in the "v0" spec, which didn't tie reports to the page lifetime. Since we're doing that now, the only way that a report can be delayed that much would be if the user kept the page open for that long. If a reporting implementation were to delay all reports, for instance, until the page was unloaded, would you see that as problematic, privacy-wise?

@annevk
Copy link
Member Author

annevk commented Mar 9, 2021

I think (it's been a while) I was thinking more about the case where the user has closed the document, but the user agent decides to not do reporting until shutdown or some such.

@yoavweiss
Copy link
Contributor

@clelland - Is the behavior that @annevk talks about something that's still specified in Reporting?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
privacy-tracker Group bringing to attention of Privacy, or tracked by the Privacy Group but not needing response.
Projects
None yet
Development

No branches or pull requests

4 participants