this post was submitted on 08 Aug 2024
145 points (96.8% liked)
Firefox
20333 readers
131 users here now
/c/firefox
A place to discuss the news and latest developments on the open-source browser Firefox.
Rules
1. Adhere to the instance rules
2. Be kind to one another
3. Communicate in a civil manner
Reporting
If you would like to bring an issue to the moderators attention, please use the "Create Report" feature on the offending comment or post and it will be reviewed as time allows.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
It isn't anonymous, it's slightly obscured.
They use ohttp ( a proxy ) run buy a "partner" they control to do the obscuring.
That should be part of people's informed threat modeling. Having a tattle tale in the browser reporting web activity to a third party is a big deal.
From what I've seen PPA doesn't depend on OHTTP to do the obscuring. This page mentioned Distributed Aggregation Protocol and differential privacy, that are meant to ensure that it is literally impossible for any one party to see your data. Not just "obscured", but impossible to access.
But be sure to let us know what data about us a partner could theoretically view, and how, if you disagree.
https://datatracker.ietf.org/doc/html/draft-ietf-ppm-dap#name-security-considerations
https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-vdaf-08#name-security-considerations
Clearly not impossible even according to the standards authors.
I see only two data leak risks mentioned:
The first doesn't need PPA. As for the second, Firefox can already conspire to compromise your privacy, if you're using it.
deleted by creator
There's a bit in the technical explainer here. But there's really no way for you to add details; the whole point is to share nothing about you specifically.