Leading the web to its full potential
WSC
STANDARDS
PARTICIPATE
MEMBERSHIP
ABOUT W3C
W3C
Participate
Mail, News, Blogs, Podcasts , and.
W3C
Blog
MAIL, NEWS,
BLOGS,
PRIVACY INTEREST GROUP (PING)
PODCASTS
AND
2021 YEAR IN REVIEW AND THANK
TUTORIALS
YOUS
News
10 January 2022 by Samuel Weiler
Posted in: Privacy and
Weekly
Security
The W3C blog
Newsletter
is for
W3C Blog
PING 2021 Year in Review
discussions
PING performed 24 privacy reviews in 2021 and provided
within W3C
Mailing Lists
guidance on several other APIs
and the Web
Podcasts and
community at
Video
PING privacy reviews resulted in privacy improvements in
large.
proposed specifications.
Some examples include:
Announcements
Tutorials and
issues on Web
Courses
Payment Request API: The specification identifies
standards and
the potential for sites to use the API for tracking instead
educational
Team
Submissions
of payments and recommends requiring users' consent
materials
mitigation:
among other
Web Neural Network API: The specification restricts
topics are
functionality to first-party contexts to prevent others
posted here;
from using the functionality for tracking:
see the W3C
WebCodecs: We identified ways that sites could
home page for
abuse the proposed functionality to learn details about a
official
user's CPU and GPU. The specification mitigates this
announcements
risk by limiting the revealed data to only what would be
from W3C .
otherwise available and by suggesting ways that user
agents could further dynamically limit exposure.
Search
Incremental Font Transfer: The API no longer sends
unneeded information about the user's local network
W3C Blog
conditions_
Search
CSS Masking Module
evel 1: The specification now
Search
warns that it should not be used for privacy-protecting
purposes because the masking is purely cosmetic and
Archives
does not irreversibly redact data:
Ambient Light Sensor API: The working group made
Archives
its data minimization guidance normative.
Select Month
Here are some other privacy issues we uncovered:
Categories
Decentralized Identifier Specification v1.O: The
specification could introduce new unique identifiers that
Categories
could be used to track individual users and the
Select Category
associated user activity could end up stored as
persistent data in blockchains.
S n Ie
Skip