Code Monkey home page Code Monkey logo

Comments (3)

Melatonin64 avatar Melatonin64 commented on July 21, 2024

I understand that there are security concerns with exposing these properties, but setting an upper limit on navigator.connection.downlink might be excessive.
It renders that property useless for some use cases (or at least much less useful).
An example of such a use case would be adaptive video streaming.
Let's say I'm implementing a client-side DASH video player.
Instead of starting playback with some default video quality and adjusting as we go, I could use the navigator.connection.downlink property to start with the most appropriate representation.

Nowadays, when gigabit internet connections are available to consumers,
4K video resolutions (and above) are gaining popularity and the NetworkInfo API is no longer only available on mobile devices, it makes little sense to limit this value to 10 Mbps.

Will imposing a lower limit on kbps instead help to improve privacy?
Seems to me this would be analogous to the upper limit on RTT...

Please consider removing the upper kbps limit (or at least increasing its value to keep with the times).

from netinfo.

jkarlin avatar jkarlin commented on July 21, 2024

Can you explain a bit more what you mean by cross-origin fingerprinting? Also, which hostname are you referring to in step 1? The hostname of the document making the NetInfo call?

from netinfo.

tarunban avatar tarunban commented on July 21, 2024

Can you explain a bit more what you mean by cross-origin fingerprinting?

The main concern was that two different origins may be able to correlate fetches from a single user (i.e., determine if the two fetches come from the same user). @msramek touched upon this a bit in this comment.

Also, which hostname are you referring to in step 1? The hostname of the document making the NetInfo call?

The hostname of the origin which is running the JavaScript.

from netinfo.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.