Article: Google Chrome's IP Protection

Bill_Gibson — Mon, 23 Oct 2023 19:51:31 GMT

Context and Goals (from the github):

Location can be a key identifier for understanding what content is relevant for users. As Chrome prepares to deprecates third party cookies, the Chrome team wants to ensure that we are taking appropriate steps to improve privacy on the web while also maintaining key use cases. We have shared our proposal for masking IP addresses for certain third party domains on the web. This comes with additional implications, like how IP addresses are used to understand the location of GitHub - GoogleChrome/ip-protection web users. This document outlines our initial proposal for how IP Protection will implement GeoIP mappings.

It’s worth noting that GeoIP —with or without IP Protection— only provides approximate and coarse location information and that there are ways in which users can obfuscate this data. With this proposal, we aim to improve user privacy while maintaining most of the existing uses of GeoIP as a coarse location signal. Addressing pre-existing accuracy issues of GeoIP is not a goal and generally, this proposal will inherit the prior limitations of IP as a source of location information.

Long Term (from the github):

Long term solutions will evolve and will be shaped in conjunction with the ecosystem. We will collaborate with ISPs, CDNs, third parties, and destination sites towards the end-state of privacy proxies for the web. For instance, ISPs and CDNs are well suited to operate privacy proxies.

As IP Protection evolves, we believe policy will have a part in the overall solution to address circumvention by websites. When needed, we'll develop the policy and seek input from the ecosystem. Our intent for a policy within the proposal will be to encourage web services to be accountable for the usage and sharing of client IP addresses given the sensitivity of IP as an identifying data point. By creating transparency around the use of IP addresses, we hope to promote industry accountability regarding how IP addresses are accessed and used in the web ecosystem.

We welcome feedback on this proposal, especially with regard to some of the open questions we are considering.

Re: Article: Google Chrome's IP Protection

Bill_Gibson — Mon, 23 Oct 2023 19:52:12 GMT

Welcome to "phase 0" with a built in "learning curve"

Re: Article: Google Chrome's IP Protection

Kim_Nilsson — Mon, 23 Oct 2023 19:58:31 GMT

The immediate response in one of the security forums I frequent. 🙂

So Google wants:

To know the domains you go to (Google SmartScreen)
The DNS queries you make (DoH)
The applications you use (Google integrated login)
Where you go (location history)
What you look for, even idly (search history)

And now ...

"All your packets belong to Google"

topic Re: Article: Google Chrome's IP Protection in Peer-Peer Topics

Article: Google Chrome's IP Protection

Re: Article: Google Chrome's IP Protection

Re: Article: Google Chrome's IP Protection