Contact emails

victor...@chromium.org, miketa...@chromium.org

Explainer

https://github.com/WICG/client-hints-infrastructure#readme

https://github.com/WICG/ua-client-hints#explainer-reducing-user-agent-granularity

Specification

https://wicg.github.io/ua-client-hints/

Summary

User-agent client hints (a set of `Sec-CH-UA-*`) aim to deprecate and
replace the User-Agent header to reduce the passive fingerprinting surface
we expose via HTTP requests. As we previously rolled-out user-agent client
hints on Windows, Mac, Linux, Chrome OS and Android, we intend to proceed
with shipping user-agent client hints on Android WebView. For overridden
user-agent strings, we only populate user-agent client hints if the
overridden user-agent contains the default user-agent. In this case, we
will only generate low-entropy user-agent client hints If users also
override the user-agent string through command-line.

Blink component

Blink>Network>ClientHints

TAG review

https://github.com/w3ctag/design-reviews/issues/320

TAG review status

Closed.

Risks
Interoperability and Compatibility

Introducing User-Agent client hints in itself won't affect any page since
it's purely opt-in features. It helps us to improve the interoperability
between Chrome and WebView.

Here is our proposed rollout plan in Chrome Stable channel (Canary/Dev/Beta
has been enabled 50%), with the understanding that if we discover
concerning breakage or regressions via health metrics or bug reports we
will pause the rollout:


Stage

Duration

Date

Stable 1% (M116+)

M116 stable release is shipping to 100% (a best guess)

Aug 22, 2023

Stable 10% (M116+)

~2 weeks after previous stage

Sep 5, 2023

TOT Default (M117)

~2 weeks after previous stage

Sep 19, 2023

Stable 100% (M116=>M117)

~ Same business day as previous stage

Sep 19, 2023

Gecko: Non-harmful on User-Agent client hints (
https://github.com/mozilla/standards-positions/issues/202).

WebKit: No signals (https://github.com/WebKit/standards-positions/issues/70
).

Web developers: Mixed signals (https://crbug.com/1430051
<https://bugs.chromium.org/p/chromium/issues/detail?id=1430051>). We know
at least one site that uses user-agent client hints on Android WebView..

Debuggability

No special DevTools support needed. The UA Client Hints headers will be as
debuggable as other request headers, through DevTools’ network tab.

Will this feature be supported on all six Blink platforms (Windows, Mac,
Linux, Chrome OS, Android, and Android WebView)?

Yes

Notes: The existing flag UserAgentClientHint was already enabled for other
five platforms (Windows, Mac, Linux, Chrome OS and Android).

Is this feature fully tested by web-platform-tests
<https://chromium.googlesource.com/chromium/src/+/master/docs/testing/web_platform_tests.md>
?

https://wpt.fyi/results/client-hints

Flag name

UserAgentClientHint

Tracking bug

https://crbug.com/1430051
<https://bugs.chromium.org/p/chromium/issues/detail?id=1430051>

Launch bug

https://launch.corp.google.com/launch/4261345

Link to entry on the Chrome Platform Status
https://chromestatus.com/feature/5127746375647232

-- 
You received this message because you are subscribed to the Google Groups 
"blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to blink-dev+unsubscr...@chromium.org.
To view this discussion on the web visit 
https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAJh4P7HgdbnjwsYqgMiS%3D0Anp8y77ipvaQ1j8MWAL7YApoVnXA%40mail.gmail.com.

Reply via email to