Re: [blink-dev] Intent to Ship: Private Aggregation API: filtering IDs

Hi blink-dev, We’ve discovered a minor bug in our implementation of filtering IDs. Today, Chrome incorrectly ignores the value of filteringIdMaxBytes when it decides whether to send a report deterministically

Re: [blink-dev] Intent to Ship: Private Aggregation API: increase contribution limit to 100 for Protected Audience callers

LGTM3 On Wed, Oct 9, 2024 at 8:36 AM Vladimir Levin wrote: > LGTM2 > > On Sat, Oct 5, 2024 at 7:47 AM Yoav Weiss (@Shopify) < > yoavwe...@chromium.org> wrote: > >> LGTM1 >> >> On Fri, Oct 4, 2024 at 8:48 PM Dan McArdle wrote: >> >>> No, the reporting endpoint can’t infer the number of null cont

Re: [blink-dev] Intent to Ship: Private Aggregation API: increase contribution limit to 100 for Protected Audience callers

LGTM2 On Sat, Oct 5, 2024 at 7:47 AM Yoav Weiss (@Shopify) wrote: > LGTM1 > > On Fri, Oct 4, 2024 at 8:48 PM Dan McArdle wrote: > >> No, the reporting endpoint can’t infer the number of null contributions. >> Critically, the browser pads the payload before encrypting it with the >> Aggregation

Re: [blink-dev] Intent to Ship: Private Aggregation API: increase contribution limit to 100 for Protected Audience callers

LGTM1 On Fri, Oct 4, 2024 at 8:48 PM Dan McArdle wrote: > No, the reporting endpoint can’t infer the number of null contributions. > Critically, the browser pads the payload before encrypting it with the > Aggregation Service’s public key. That ciphertext is sent to the reporting > endpoint, so

Re: [blink-dev] Intent to Ship: Private Aggregation API: increase contribution limit to 100 for Protected Audience callers

No, the reporting endpoint can’t infer the number of null contributions. Critically, the browser pads the payload before encrypting it with the Aggregation Service’s public key. That ciphertext is sent to the reporting endpoint, so the performance of HTTP compression won’t vary depending on the

Re: [blink-dev] Intent to Ship: Private Aggregation API: increase contribution limit to 100 for Protected Audience callers

On Thu, Oct 3, 2024 at 8:58 PM Dan McArdle wrote: > That’s correct! In isolation, cleartext payloads will be ~5x larger. > > In terms of magnitude, typical report sizes will increase from ~1.5 KiB to > ~6 KiB. (Double these estimates when debug mode is enabled.) > OK, that's not awful. One more

Re: [blink-dev] Intent to Ship: Private Aggregation API: increase contribution limit to 100 for Protected Audience callers

That’s correct! In isolation, cleartext payloads will be ~5x larger. In terms of magnitude, typical report sizes will increase from ~1.5 KiB to ~6 KiB. (Double these estimates when debug mode is enabled.) On Wednesday, October 2, 2024 at 10:30:28 PM UTC-4 Yoav Weiss wrote: > That's extremely us

Re: [blink-dev] Intent to Ship: Private Aggregation API: increase contribution limit to 100 for Protected Audience callers

That's extremely useful, thanks!! Can you expand on the size of the payloads in question? I'm assuming we'd now be seeing 5x larger payloads, but I'm not sure what's the order of magnitude we're talking about here. On Wed, Oct 2, 2024 at 10:57 PM Dan McArdle wrote: > Hi, Daniel! > > First, a li

Re: [blink-dev] Intent to Ship: Private Aggregation API: increase contribution limit to 100 for Protected Audience callers

Hi, Daniel! First, a little background. Sites make Private Aggregation contributions from within isolated contexts, where they have access to cross-site data. The browser sends these contributions back to the site that made them via a report’s encrypted payload. Although the site’s reporting

Re: [blink-dev] Intent to Ship: Private Aggregation API: increase contribution limit to 100 for Protected Audience callers

I admit to not being the most versed in Private Aggregation, but I wonder why there is a limit at all? You say it might "increase the cost of operating the Aggregation Service", but that connection is not clear to me when you also say that people could work around the limit already. /Daniel O

[blink-dev] Intent to Ship: Private Aggregation API: increase contribution limit to 100 for Protected Audience callers

Contact emailsdmcar...@chromium.org Explainer https://github.com/patcg-individual-drafts/private-aggregation-api/pull/138 Specification https://github.com/patcg-individual-drafts/private-aggregation-api/pull/150 Summary Enables Protected Audience script runners to make up to 100 contributions p

Re: [blink-dev] Intent to Ship: Private Aggregation API: client-side contribution merging

LGTM3 On Wed, Aug 28, 2024 at 3:25 AM Yoav Weiss (@Shopify) < yoavwe...@chromium.org> wrote: > LGTM2 > > On Tue, Aug 27, 2024 at 6:32 PM Vladimir Levin > wrote: > >> This looks like a fairly minor improvement to the API. It seems like the >> change would allow more contributions without increasi

Re: [blink-dev] Intent to Ship: Private Aggregation API: client-side contribution merging

LGTM2 On Tue, Aug 27, 2024 at 6:32 PM Vladimir Levin wrote: > This looks like a fairly minor improvement to the API. It seems like the > change would allow more contributions without increasing performance > concerns. Please let me know if there are any subtleties that I may have > missed. > > L

Re: [blink-dev] Intent to Ship: Private Aggregation API: client-side contribution merging

This looks like a fairly minor improvement to the API. It seems like the change would allow more contributions without increasing performance concerns. Please let me know if there are any subtleties that I may have missed. LGTM1 Thanks, Vlad On Fri, Aug 16, 2024 at 5:50 PM Alex Turner wrote: >

[blink-dev] Intent to Ship: Private Aggregation API: client-side contribution merging

Contact emailsale...@chromium.org Explainer https://github.com/patcg-individual-drafts/private-aggregation-api/pull/135 Specification https://github.com/patcg-individual-drafts/private-aggregation-api/pull/136 Summary Modifies the Private Aggregation API to merge histogram contributions with th

Re: [blink-dev] Intent to Ship: Private Aggregation API: filtering IDs

LGTM3 On Fri, Jul 26, 2024 at 2:04 AM Yoav Weiss (@Shopify) < yoavwe...@chromium.org> wrote: > LGTM2 > > On Friday, July 19, 2024 at 6:56:59 PM UTC+2 Mike Taylor wrote: > >> LGTM1 >> On 7/17/24 5:24 PM, Alex Turner wrote: >> >> On Mon, Jul 15, 2024 at 11:03 AM Mike Taylor >> wrote: >> >>> On 7/1

Re: [blink-dev] Intent to Ship: Private Aggregation API: filtering IDs

LGTM2 On Friday, July 19, 2024 at 6:56:59 PM UTC+2 Mike Taylor wrote: > LGTM1 > On 7/17/24 5:24 PM, Alex Turner wrote: > > On Mon, Jul 15, 2024 at 11:03 AM Mike Taylor > wrote: > >> On 7/12/24 10:44 AM, Alex Turner wrote: >> >> On Wed, Jul 10, 2024 at 11:25 AM Mike Taylor >> wrote: >> >>> On

Re: [blink-dev] Intent to Ship: Private Aggregation API: filtering IDs

LGTM1 On 7/17/24 5:24 PM, Alex Turner wrote: On Mon, Jul 15, 2024 at 11:03 AM Mike Taylor wrote: On 7/12/24 10:44 AM, Alex Turner wrote: On Wed, Jul 10, 2024 at 11:25 AM Mike Taylor wrote: On 7/8/24 4:05 PM, Alex Turner wrote: Interoperability and Co

Re: [blink-dev] Intent to Ship: Private Aggregation API: filtering IDs

On Mon, Jul 15, 2024 at 11:03 AM Mike Taylor wrote: > On 7/12/24 10:44 AM, Alex Turner wrote: > > On Wed, Jul 10, 2024 at 11:25 AM Mike Taylor > wrote: > >> On 7/8/24 4:05 PM, Alex Turner wrote: >> >> >> Interoperability and Compatibility >> >> The Aggregation Service (used to process the aggreg

Re: [blink-dev] Intent to Ship: Private Aggregation API: filtering IDs

On 7/12/24 10:44 AM, Alex Turner wrote: On Wed, Jul 10, 2024 at 11:25 AM Mike Taylor wrote: On 7/8/24 4:05 PM, Alex Turner wrote: Interoperability and Compatibility The Aggregation Service (used to process the aggregatable reports) typically allows its releases to

Re: [blink-dev] Intent to Ship: Private Aggregation API: filtering IDs

On Wed, Jul 10, 2024 at 11:25 AM Mike Taylor wrote: > > On 7/8/24 4:05 PM, Alex Turner wrote: > > Contact emails ale...@chromium.org > > Explainer > https://github.com/patcg-individual-drafts/private-aggregation-api/blob/main/flexible_filtering.md > > Specification > https://github.com/patcg-indi

Re: [blink-dev] Intent to Ship: Private Aggregation API: filtering IDs

On 7/8/24 4:05 PM, Alex Turner wrote: Contact emails ale...@chromium.org Explainer https://github.com/patcg-individual-drafts/private-aggregation-api/blob/main/flexible_filtering.md Specification https://github.com/patcg-individual-drafts/private-aggregation-api/

[blink-dev] Intent to Ship: Private Aggregation API: filtering IDs

Contact emailsale...@chromium.org Explainer https://github.com/patcg-individual-drafts/private-aggregation-api/blob/main/flexible_filtering.md Specification https://github.com/patcg-individual-drafts/private-aggregation-api/pull/123 Summary Modifies the Private Aggregation API to add a 'filteri

Re: [blink-dev] Intent to Ship: Private Aggregation API: aggregation coordinator selection

Thanks all! A small update -- we're now planning for this to ship in M121 (instead of M120). On Mon, Oct 30, 2023 at 3:08 AM Yoav Weiss wrote: > LGTM3 > > On Friday, October 27, 2023 at 11:35:52 PM UTC+2 Mike Taylor wrote: > >> LGTM2 >> On 10/27/23 5:13 PM, Chris Harrelson wrote: >> >> LGTM1 >>

Re: [blink-dev] Intent to Ship: Private Aggregation API: aggregation coordinator selection

LGTM3 On Friday, October 27, 2023 at 11:35:52 PM UTC+2 Mike Taylor wrote: > LGTM2 > On 10/27/23 5:13 PM, Chris Harrelson wrote: > > LGTM1 > > On Fri, Oct 20, 2023 at 9:44 AM Alex Turner wrote: > >> Contact emails >> >> ale...@chromium.org >> >> Explainer >> https://github.com/patcg-individual-

Re: [blink-dev] Intent to Ship: Private Aggregation API: aggregation coordinator selection

LGTM2 On 10/27/23 5:13 PM, Chris Harrelson wrote: LGTM1 On Fri, Oct 20, 2023 at 9:44 AM Alex Turner wrote: Contact emails ale...@chromium.org Explainer https://github.com/patcg-individual-drafts/private-aggregation-api#aggregation-coordinator-cho

Re: [blink-dev] Intent to Ship: Private Aggregation API: aggregation coordinator selection

LGTM1 On Fri, Oct 20, 2023 at 9:44 AM Alex Turner wrote: > Contact emails > > ale...@chromium.org > > Explainer > https://github.com/patcg-individual-drafts/private-aggregation-api#aggregation-coordinator-choice > Specification > https://github.com/patcg-individual-drafts/private-aggregation-api

[blink-dev] Intent to Ship: Private Aggregation API: aggregation coordinator selection

Contact emails ale...@chromium.org Explainer https://github.com/patcg-individual-drafts/private-aggregation-api#aggregation-coordinator-choice Specification https://github.com/patcg-individual-drafts/private-aggregation-api/pull/106 Summary Modification to the Private Aggregation API to provide

Re: [blink-dev] Intent to Ship: Private Aggregation API bundled enhancements

Thanks all! A quick update -- the chromestatus reviews are now all complete. On Fri, Oct 6, 2023 at 10:37 AM Mike Taylor wrote: > LGTM3 > On 10/5/23 6:51 PM, Chris Harrelson wrote: > > LGTM2 > > On Wed, Oct 4, 2023 at 10:46 PM Yoav Weiss wrote: > >> LGTM1 >> >> On Wed, Oct 4, 2023 at 7:17 PM Al

Re: [blink-dev] Intent to Ship: Private Aggregation API bundled enhancements

LGTM3 On 10/5/23 6:51 PM, Chris Harrelson wrote: LGTM2 On Wed, Oct 4, 2023 at 10:46 PM Yoav Weiss wrote: LGTM1 On Wed, Oct 4, 2023 at 7:17 PM Alex Turner wrote: Mike: thanks for the clarification, I've added a comment to the TAG review and kicked off those revie

Re: [blink-dev] Intent to Ship: Private Aggregation API bundled enhancements

LGTM2 On Wed, Oct 4, 2023 at 10:46 PM Yoav Weiss wrote: > LGTM1 > > On Wed, Oct 4, 2023 at 7:17 PM Alex Turner wrote: > >> Mike: thanks for the clarification, I've added a comment to the TAG >> review and kicked off those reviews in a new entry: >> https://chromestatus.com/feature/5148973702840

Re: [blink-dev] Intent to Ship: Private Aggregation API bundled enhancements

LGTM1 On Wed, Oct 4, 2023 at 7:17 PM Alex Turner wrote: > Mike: thanks for the clarification, I've added a comment to the TAG review > and kicked off those reviews in a new entry: > https://chromestatus.com/feature/5148973702840320. I'll ping this thread > when those reviews are complete. > > Yo

Re: [blink-dev] Intent to Ship: Private Aggregation API bundled enhancements

Mike: thanks for the clarification, I've added a comment to the TAG review and kicked off those reviews in a new entry: https://chromestatus.com/feature/5148973702840320. I'll ping this thread when those reviews are complete. Yoav: yes, that's our understanding (although until enrollment is enforc

Re: [blink-dev] Intent to Ship: Private Aggregation API bundled enhancements

Am I right to assume that the API is still only being used by a relatively small number of partners to which y'all can communicate the new constraints? On Monday, October 2, 2023 at 11:08:43 PM UTC+2 Mike Taylor wrote: > Hey Alex, > > Apologies for the delay. It would probably be good to make a

Re: [blink-dev] Intent to Ship: Private Aggregation API bundled enhancements

Hey Alex, Apologies for the delay. It would probably be good to make a new entry and request all the relevant review approvals (sorry for the extra work). Also, probably useful to drop a link in the TAG review to this Intent, so reviewers can eventually be aware of these changes. On 9/27/23

Re: [blink-dev] Intent to Ship: Private Aggregation API bundled enhancements

I set this feature up as a "Web developer facing change to existing code", but I'm seeing that "New feature incubation" may have been more appropriate (although the guidance is a bit uncertain). Unfortunately, that means chromestatu

Re: [blink-dev] Intent to Ship: Private Aggregation API bundled enhancements

On Wed, Sep 27, 2023 at 2:14 AM Yoav Weiss wrote: > > > On Mon, Sep 25, 2023 at 11:52 PM Alex Turner wrote: > >> Contact emailsale...@chromium.org >> >> Specification >> >>- >> >>Null report fixes: >>https://github.com/patcg-individual-drafts/private-aggregation-api/pull/91 >>- >

Re: [blink-dev] Intent to Ship: Private Aggregation API bundled enhancements

Please also fill out the other chromestatus review categories for this Intent, in particular for Privacy and Security, thanks. On Tue, Sep 26, 2023 at 11:14 PM Yoav Weiss wrote: > > > On Mon, Sep 25, 2023 at 11:52 PM Alex Turner wrote: > >> Contact emailsale...@chromium.org >> >> Specification

Re: [blink-dev] Intent to Ship: Private Aggregation API bundled enhancements

On Mon, Sep 25, 2023 at 11:52 PM Alex Turner wrote: > Contact emailsale...@chromium.org > > Specification > >- > >Null report fixes: >https://github.com/patcg-individual-drafts/private-aggregation-api/pull/91 >- > >Debug mode eligibility changes: >https://github.com/patcg-

[blink-dev] Intent to Ship: Private Aggregation API bundled enhancements

Contact emailsale...@chromium.org Specification - Null report fixes: https://github.com/patcg-individual-drafts/private-aggregation-api/pull/91 - Debug mode eligibility changes: https://github.com/patcg-individual-drafts/private-aggregation-api/pull/90 - Padding report

Re: [blink-dev] Intent to Ship: Private Aggregation API

LGTM3 On Tue, Jul 11, 2023, 17:59 Chris Harrelson wrote: > LGTM2 > > On Mon, Jul 10, 2023, 2:58 PM Mike Taylor wrote: > >> LGTM1 >> On 7/10/23 2:04 PM, Alex Turner wrote: >> >> As a quick update, the WebDriver extension PR has now landed. (Thanks >> Mathias for the review!) So, it should be saf

Re: [blink-dev] Intent to Ship: Private Aggregation API

LGTM2 On Mon, Jul 10, 2023, 2:58 PM Mike Taylor wrote: > LGTM1 > On 7/10/23 2:04 PM, Alex Turner wrote: > > As a quick update, the WebDriver extension PR has now landed. (Thanks > Mathias for the review!) So, it should be safe to include that change as > part of this I2S. > > On Mon, Jul 10, 202

Re: [blink-dev] Intent to Ship: Private Aggregation API

LGTM1 On 7/10/23 2:04 PM, Alex Turner wrote: As a quick update, the WebDriver extension PR has now landed. (Thanks Mathias for the review!) So, it should be safe to include that change as part of this I2S. On Mon, Jul 10, 2023 at 4:00 AM Mathias Bynens wrote: Thank you for including a W

Re: [blink-dev] Intent to Ship: Private Aggregation API

As a quick update, the WebDriver extension PR has now landed. (Thanks Mathias for the review!) So, it should be safe to include that change as part of this I2S. On Mon, Jul 10, 2023 at 4:00 AM Mathias Bynens wrote: > Thank you for including a WebDriver extension >

Re: [blink-dev] Intent to Ship: Private Aggregation API

Thank you for including a WebDriver extension for this; I’ve left some review feedback on the PR. Overall, I wanted to voice my support for pursuing the Web Platform feature (and this Intent) separately from the WebDri

Re: [blink-dev] Intent to Ship: Private Aggregation API

On Fri, Jul 7, 2023 at 3:48 PM Alex Turner wrote: > > > On Thu, Jul 6, 2023 at 8:42 PM Rick Byers wrote: > >> On Wed, Jun 28, 2023 at 12:34 PM Alex Turner wrote: >> >>> >>> On Wed, Jun 28, 2023 at 11:53 AM Rick Byers wrote: >>> On Mon, Jun 26, 2023 at 12:32 PM Yoav Weiss wrote:

Re: [blink-dev] Intent to Ship: Private Aggregation API

On Thu, Jul 6, 2023 at 8:42 PM Rick Byers wrote: > On Wed, Jun 28, 2023 at 12:34 PM Alex Turner wrote: > >> >> On Wed, Jun 28, 2023 at 11:53 AM Rick Byers wrote: >> >>> On Mon, Jun 26, 2023 at 12:32 PM Yoav Weiss >>> wrote: >>> I wanted to comment on this intent with my spec mentor hat on

Re: [blink-dev] Intent to Ship: Private Aggregation API

مرحبا في الجمعة، 7 جويلية 2023 01:42 Rick Byers كتب: > On Wed, Jun 28, 2023 at 12:34 PM Alex Turner wrote: > >> >> On Wed, Jun 28, 2023 at 11:53 AM Rick Byers wrote: >> >>> On Mon, Jun 26, 2023 at 12:32 PM Yoav Weiss >>> wrote: >>> I wanted to comment on this intent with my spec mentor

Re: [blink-dev] Intent to Ship: Private Aggregation API

On Wed, Jun 28, 2023 at 12:34 PM Alex Turner wrote: > > On Wed, Jun 28, 2023 at 11:53 AM Rick Byers wrote: > >> On Mon, Jun 26, 2023 at 12:32 PM Yoav Weiss >> wrote: >> >>> I wanted to comment on this intent with my spec mentor hat on. I >>> reviewed this specification and provided feedback to

Re: [blink-dev] Intent to Ship: Private Aggregation API

On Wed, Jun 28, 2023 at 11:53 AM Rick Byers wrote: > On Mon, Jun 26, 2023 at 12:32 PM Yoav Weiss > wrote: > >> I wanted to comment on this intent with my spec mentor hat on. I reviewed >> this specification and provided feedback to its authors. >> >> My main point of feedback was around its laye

Re: [blink-dev] Intent to Ship: Private Aggregation API

On Mon, Jun 26, 2023 at 12:32 PM Yoav Weiss wrote: > I wanted to comment on this intent with my spec mentor hat on. I reviewed > this specification and provided feedback to its authors. > > My main point of feedback was around its layering and how it relates to > the other 2 specifications (Share

Re: [blink-dev] Intent to Ship: Private Aggregation API

I wanted to comment on this intent with my spec mentor hat on. I reviewed this specification and provided feedback to its authors. My main point of feedback was around its layering and how it relates to the other 2 specifications (Shared Storage and Protected Audience) that use the infrastructure

Re: [blink-dev] Intent to Ship: Private Aggregation API

On Tue, Jun 20, 2023 at 5:39 PM Rick Byers wrote: > > On Tue, Jun 20, 2023 at 4:51 PM Alex Turner wrote: > >> Contact emailsale...@chromium.org >> >> Explainer >> https://github.com/patcg-individual-drafts/private-aggregation-api >> >> Specification >> https://patcg-individual-drafts.github.io/p

Re: [blink-dev] Intent to Ship: Private Aggregation API

On Tue, Jun 20, 2023 at 11:39 PM Rick Byers wrote: > > On Tue, Jun 20, 2023 at 4:51 PM Alex Turner wrote: > >> Contact emailsale...@chromium.org >> >> Explainer >> https://github.com/patcg-individual-drafts/private-aggregation-api >> >> Specification >> https://patcg-individual-drafts.github.io/

Re: [blink-dev] Intent to Ship: Private Aggregation API

On Tue, Jun 20, 2023 at 4:51 PM Alex Turner wrote: > Contact emailsale...@chromium.org > > Explainer > https://github.com/patcg-individual-drafts/private-aggregation-api > > Specification > https://patcg-individual-drafts.github.io/private-aggregation-api > > Summary > > A generic mechanism for m

[blink-dev] Intent to Ship: Private Aggregation API

Contact emailsale...@chromium.org Explainerhttps://github.com/patcg-individual-drafts/private-aggregation-api Specification https://patcg-individual-drafts.github.io/private-aggregation-api Summary A generic mechanism for measuring aggregate, cross-site data in a privacy preserving manner. The