Contact emails sau...@google.com, las...@google.com, nick...@google.com, erictrou...@chromium.org, ryanka...@google.com, ayk...@google.com
Explainer https://github.com/GoogleChrome/ip-protection/blob/main/prt_explainer.md Specification https://datatracker.ietf.org/doc/html/draft-pfeiffenberger-prtokens-00 Summary To enable businesses to estimate the amount of fraud on their systems, train models to defend against fraud, and analyze emerging fraudulent behavior while still mitigating the ability to track users at scale using IP addresses, we propose the introduction of a delayed IP sampling mechanism called Probabilistic Reveal Tokens (PRTs) alongside IP Protection for use in proxied traffic. Chrome plans to launch IP Protection <https://github.com/GoogleChrome/ip-protection> in incognito mode later this year. PRTs will be included on proxied requests in a new HTTP header added by the browser for domains that indicate they want to receive them via a signup process. Each PRT contains a ciphertext, generated by an Issuer and re-randomized by the browser for unlinkability prior to the request, that the recipient can decrypt after a delay. Google will be the issuer for Chrome's implementation. A minority of the decrypted PRTs contain the client's pre-proxy IP address (i.e. non-masked, and as observed by the token issuer), while the remaining PRTs provide no information about the client's original IP address. This results in only a small percent of PRTs containing and revealing the user's IP. Our explainer introduces key tunable parameters <https://github.com/GoogleChrome/ip-protection/blob/main/prt_explainer.md#tunable-parameters> for this proposal: - Reveal rate: the percentage of the time that the tokens are revealed - Epoch and delay period length: the periods after which tokens are made available We will initially set reveal rate to 10% and epoch and delay period length both to 24 hours each. Developers that want to receive PRTs will need to request them at console.privacysandbox.google.com. Sign ups will open when PRTs are available in pre-Stable channels. Blink component Privacy>Fingerprinting>IPProtection <https://issues.chromium.org/issues?q=customfield1222907:%22Privacy%3EFingerprinting%3EIPProtection%22> TAG review The IP Protection TAG review, for which this feature is closely tied, was closed by the TAG as “Resolution: Decline” ( https://github.com/w3ctag/design-reviews/issues/1083) TAG review status Resolution Decline Risks Interoperability and Compatibility None Gecko: No signal (https://github.com/mozilla/standards-positions/issues/1273 ) WebKit: No signal (https://github.com/WebKit/standards-positions/issues/529) Web developers: Positive signal from invalid traffic detection providers, though open questions <https://github.com/GoogleChrome/ip-protection/issues/81> remain about the impact on fraud detection with initial parameter settings. As IP Protection launches, we’ll continue to solicit feedback. Other signals: WebView application risks Does this intent deprecate or change behavior of existing APIs, such that it has potentially high risk for Android WebView-based applications? None Debuggability Attached PRTs are visible in the Chrome DevTools Network panel. Will this feature be supported on all six Blink platforms (Windows, Mac, Linux, ChromeOS, Android, and Android WebView)? No, supported everywhere IP Protection is supported (no WebView). Is this feature fully tested by web-platform-tests <https://chromium.googlesource.com/chromium/src/+/main/docs/testing/web_platform_tests.md> ? No, as there is no browser API for actuating PRTs (only a header attached as part of IP Protection), we don’t plan to add any. DevTrial instructions https://github.com/explainers-by-googlers/prtoken-reference/blob/main/prt_dev_testing.md Flag name on about://flags None Finch feature name EnableProbabilisticRevealTokens - Note that there are many subtleties to enabling this feature, please see DevTrial instructions for enabling locally. Rollout plan Will ship enabled for all users Requires code in //chrome? False Launch bug https://launch.corp.google.com/launch/4367692 Estimated milestones Shipping on desktop 140 DevTrial on desktop 138 Shipping on Android 140 DevTrial on Android 138 Anticipated spec changes None Link to entry on the Chrome Platform Status https://chromestatus.com/feature/4914046966693888?gate=6289919137546240 -- Theodore Olsauskas-Warren Software Engineering Manager sau...@google.com -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+unsubscr...@chromium.org. To view this discussion visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CA%2B0Xr79QUTJt7bi443Ax5eMD2z%3DCsqV0o4__0tNvqKbMmLb5fg%40mail.gmail.com.
