Hey Oleg,

I think this is a great suggestion.

The privacy category idea is also interesting is there any other 
interesting settings we could offer users there?

Cheers,
Raihaan

On Wednesday, 28 April 2021 at 16:59:41 UTC+8 Oleg Nenashev wrote:

> Hi all,
>
> As you may have heard, Google is rolling out its FLoC (Federated Learning 
> of Cohorts) tracking system, for advertisement needs. This system is 
> enabled in Google Chrome by default, and it is a corporate standard for 
> many of the Jenkins users. They cannot easily opt out. Yesterday GitHub set 
> a good precedent by disabling FLoC by default 
> <https://github.blog/changelog/2021-04-27-github-pages-permissions-policy-interest-cohort-header-added-to-all-pages-sites/>.
>  
> I think we should do the same.
>
> We can explicitly disable FLoC on Jenkins resources by setting the 
> *Permissions-Policy:* *interest-cohort=() *header in Jenkins 
> distributions by default and on our websites: jenkins.io, 
> plugins.jenkins.io, javadoc, update center, etc., etc..
>
> *Jenkins distributions.* For the Jenkins core, it is a small patch adding 
> additional headers (e.g. here 
> <https://github.com/jenkinsci/jenkins/blob/0fd55bd6b50fcdf27368c6b771fb3d8363a24f83/core/src/main/java/hudson/Functions.java#L2273-L2289>).
>  
> Probably we should introduce the new "Privacy" category in the "Manage 
> Security" screen for better UX, but this particular control should be also 
> manageable by system properties so that the settings always apply.
>
> *Jenkins Infa.*  For our infra, It should be easy to do for resources 
> we host in the main infra Kubernetes cluster. Although in some cases it may 
> prevent Jenkins-friendly (or not) advertisements from popping up for users, 
> I think we should rather put privacy first and disable FLoC on our 
> resources. Google Analytics might also be a subject for removal, but I 
> suggest to have a separate thread about it
>
> What do you think?
>
> References:
>
>    - https://www.eff.org/deeplinks/2021/03/googles-floc-terrible-idea
>    - 
>    
> https://github.blog/changelog/2021-04-27-github-pages-permissions-policy-interest-cohort-header-added-to-all-pages-sites/
>    
> Best regards,
> Oleg Nenashev
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/997bab4e-f05f-4cac-b007-a25b90c7f77dn%40googlegroups.com.

Reply via email to