On Fri, Sep 8, 2017 at 5:32 AM, Tom Ritter <t...@mozilla.com> wrote: > On Thu, Sep 7, 2017 at 1:09 PM, Shubhie Panicker via dev-platform > <dev-platform@lists.mozilla.org> wrote: >> Curious - are there concerns with implementing Client Hints in general? > > Yes. But the fingerprinting team (specifically, I'm not sure what > other teams have done) haven't investigated Client Hints yet to see > what we may wish to obscure. =)
I reviewed some changes to the spec, and am of the opinion that there are problems with Client Hints in this area: see https://github.com/httpwg/http-extensions/pull/373#pullrequestreview-54009185 That's not a proper review of the sort that Tom is talking about, but the issues are suggestive of problems. As with here, the biggest concern I have is over the amount of control a UA has when it comes to how this is used. _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform