$30 off During Our Annual Pro Sale. View Details »

Chromium版EdgeのTracking Prevention機能 / Tracking Prevention in Chromium-based Microsoft Edge

Chromium版EdgeのTracking Prevention機能 / Tracking Prevention in Chromium-based Microsoft Edge

Shingo Yamazaki

February 19, 2020
Tweet

More Decks by Shingo Yamazaki

Other Decks in Programming

Transcript

  1. Chromium൛Microsoft Edgeͷ
    Tracking Preventionػೳ

    View Slide

  2. • Shingo Yamazaki
    • Cybozu, Inc.
    About me
    zaki-yama
    zaki___yama

    View Slide

  3. • PWA Night vol.13 ʙWebϒϥ΢β࠷લઢʙ
    ͱ͍͏ΠϕϯτͰ͓࿩͢Δ༧ఆͩͬͨ಺༰ͷ
    Ұ෦Ͱ͢
    • Chromium൛MS Edgeʹ͍ͭͯҎલϒϩάʹ
    ·ͱΊͨ಺༰ͷ͏ͪɺTracking Preventionʹ
    ͍ͭͯ·ͱΊ௚ͨ͠΋ͷ
    ͜ͷεϥΠυʹ͍ͭͯ

    View Slide

  4. Tracking PreventionҎ֎ͷ৘ใ͸
    ϒϩάΛ͝ࢀর͍ͩ͘͞
    ɹɾϩʔϧΞ΢τܭը
    ɹɾ*&Ϟʔυ
    ɹɾ$PMMFDUJPOTػೳ
    ɹFUD
    https://dackdive.hateblo.jp/entry/2020/02/06/090000

    View Slide

  5. ओͳ৘ใݯ
    2019೥6݄ͷهࣄ
    ػೳͷ֓ཁ঺հ
    2019೥10݄ͷهࣄ
    Ξοϓσʔτ಺༰

    View Slide

  6. Tracking Prevention ͱ͸
    ͳʹ͔

    View Slide

  7. ઃఆ > ϓϥΠόγʔͱαʔϏε

    View Slide

  8. • จࣈ௨Γ”τϥοΩϯά๷ࢭػೳ”
    • τϥοΧʔαΠτ͕ɺϢʔβʔͷࣝผ͓Αͼߦಈ௥੻ͷͨ
    Ίʹϒϥ΢βʹ৘ใΛอଘ͠Α͏ͱ͢ΔͷΛ๷ࢭ͢Δػೳ
    • ଟ͘͸๚໰ͨ͠αΠτͦͷ΋ͷͰ͸ͳ͘ɺͦͷαΠτͰ
    ಡΈࠐΜͰ͍ΔผυϝΠϯͷϦιʔε
    • جຊ/όϥϯε/ߴϨϕϧɹͷ3ͭͷϨϕϧ͕ఏڙ͞Ε͓ͯ
    ΓɺσϑΥϧτ͸ “όϥϯε”
    Tracking Prevention

    View Slide

  9. Tracking Prevention͕ߦ͏͜ͱ

    3FTUSJDU
    TUPSBHF
    BDDFTT

    #MPDL
    SFTPVSDF
    MPBET

    View Slide

  10. τϥοΧʔͱ൑ఆ͞ΕͨαΠτ͔ΒಡΈࠐΜͩϦιʔε͕ɺετϨʔδʹ
    ΞΫηε͢ΔͷΛϒϩοΫ͢Δ
    1. Restrict storage access
    BDPN
    USBDLFSDPN USBDLFSDPN4FSWFS
    $PPLJFͷอଘ
    MPDBM4UPSBHF΁ͷΞΫηε
    FUD

    View Slide

  11. τϥοΧʔͱ൑ఆ͞ΕͨαΠτͷϦιʔεΛͦ΋ͦ΋ಡΈࠐ·ͳ͍

    (“we may block that load before the request reaches the network”)
    2. Block resource loads
    BDPN
    USBDLFSDPN USBDLFSDPN4FSWFS

    View Slide

  12. Tracking Preventionͷྫ

    View Slide

  13. ΞυϨεόʔͷ伴ΞΠίϯ͔Β
    ֬ೝͰ͖Δ

    View Slide

  14. Tracking Preventionͷ
    ͘͠Έ

    View Slide

  15. ෳ਺ͷ͘͠ΈΛ૊Έ߹Θ࣮ͤͯݱ͍ͯ͠Δ
    Ͳ͏͍͏͘͠Έʁ

    $MBTTJpDBUJPO

    4JUF
    FOHBHFNFOU

    0SHBOJ[BUJPOT

    View Slide

  16. • ͋ΔυϝΠϯ͕
    • τϥοΧʔ͔Ͳ͏͔
    • Ͳ͏͍͏ΧςΰϦͷτϥοΧʔ͔
    • Λ෼ྨ͢Δ͘͠Έ
    • ެࣜϒϩάʹΑΔͱɺDisconnectࣾͷϦετΛ࢖༻͍ͯ͠ΔΒ͠
    ͍
    1. Classification

    View Slide

  17. https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/

    View Slide


  18. https://disconnect.me/trackerprotection#categories-of-trackers

    View Slide

  19. • ϒϩοΫ͢ΔΧςΰϦʔΛ૿΍ͤ͹૿΍͢΄Ͳ҆શʹ
    ͸ͳΔ͕ɺຊདྷϒϩοΫ͢΂͖Ͱͳ͍΋ͷ·Ͱϒϩο
    Ϋͯ͠αΠτͷಈ͖Λյͯ͠͠·͏ͱ͍͏τϨʔυΦ
    ϑ
    • “such as federated login or embedded social
    media content.”
    • →੍ݶΛ؇࿨͢ΔͨΊͷผͷ͘͠Έͱͯ͠2΍3͕͋Δ
    1. Classification

    View Slide

  20. • αΠτʹର͢ΔϢʔβʔͷΤϯήʔδϝϯτΛɺϢʔβʔͷߦಈΛ
    ݩʹείΞϦϯά͢Δ͘͠Έ
    • ϢʔβʔͷߦಈɿαΠτͷӾཡճ਺ɾ଺ࡏ࣌ؒɾϝσΟΞͷ࠶ੜ
    ͳͲ
    • 0 ʙ 100఺Ͱߴ͍΄ͲΤϯήʔδϝϯτߴ
    • ܭࢉ͸୺຤ϩʔΧϧʹͷΈอଘ͞ΕΔʢͷͰɺ୺຤ؒͰಉظ͸͠ͳ
    ͍ʣ
    • edge://site-engagement ͔ΒݱࡏͷείΞΛ֬ೝͰ͖Δ
    2. Site engagement

    View Slide

  21. edge://site-engagement ͷྫ

    View Slide

  22. • ͋Δ૊৫͕ෳ਺ͷυϝΠϯ͔ΒίϯςϯπΛ഑৴͍ͯ͠Δ
    ৔߹ɺޡ൑ఆͯ͠Ұ෦ͷυϝΠϯͷϦιʔεΛϒϩοΫ͠ͳ
    ͍ͨΊͷ͘͠Έ
    • ෳ਺ͷυϝΠϯΛOrganizationͱ͍͏୯ҐͰ಺෦Ͱάϧʔϐ
    ϯά͓ͯ͘͠
    • ͍ͣΕ͔ͷυϝΠϯͷSite Engagement͕͖͍͠஋Ҏ্Ͱ͋
    Ε͹ɺυϝΠϯΛ·͙ͨϦιʔεಡΈࠐΈͷ੍ݶΛ؇࿨͢Δ
    3. Organizations

    View Slide

  23. ͋Δ૊৫͕ org1.com ͱ org1-cdn.com ͱ͍͏υϝΠϯΛอ༗͍ͯ͠Δ
    Organizationsͷྫ
    PSHDPN
    PSHDEODPN
    PSHDEODPN4FSWFS
    $PPLJFͷอଘ
    MPDBM4UPSBHF΁ͷΞΫηε
    FUD
    PSHDPN4FSWFS

    View Slide

  24. Edge͕ org1.com ͱ org1-cdn.com ΛಉҰOrganizationͱ൑ఆ͍ͯͯ͠ɺ
    ͍ͣΕ͔ͷυϝΠϯʹର͢ΔSite Engagement͕͖͍͠஋Ҏ্Ͱ͋Ε͹

    υϝΠϯΛ·͙ͨϦιʔεಡΈࠐΈͷ੍ݶ͸؇࿨͞ΕΔ
    Organizationsͷྫ
    PSHDPN
    PSHDEODPN
    PSHDEODPN4FSWFS
    PSHDPN4FSWFS

    View Slide

  25. ಉҰOrganization͡Όͳͯ͘΋

    Site engagement͕͖͍͠஋Λ௒͍͑ͯΕ͹

    Ұ࣌తʹڐՄ͞ΕΔʁ

    https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/

    View Slide

  26. 3ͭͷϨϕϧʹΑΔҧ͍

    View Slide

  27. https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/

    View Slide

  28. https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/
    $MBTTJpDBUJPOͰ෼ྨ͞Εͨ
    τϥοΧʔͷΧςΰϦ

    View Slide

  29. https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/
    4TUPSBHFBDDFTTΛϒϩοΫ
    #TUPSBHFBDDFTT΋SFTPVSDFMPBET΋ϒϩοΫ
    ϒϩοΫͳ͠

    View Slide

  30. https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/
    ͨͱ͑͹ɺ&EHF࣌఺Ͱ͸
    "OBMZUJDTΧςΰϦʔͷτϥοΧʔ͸
    ɾʮόϥϯε #BMBODFE
    ʯͩͱϒϩοΫͳ͠
    ɾʮߴϨϕϧ 4USJDU
    ʯͩͱTUPSBHFBDDFTTͷϒϩοΫ͋Γ

    View Slide

  31. ·ͱΊ

    View Slide

  32. • ৽͍͠ChromiumϕʔεͷEdgeʹ͸ɺτϥο
    ΩϯάΛ๷ࢭ͢Δػೳ͕උΘ͍ͬͯΔ
    • ʮϒϥοΫϦετΛ࢖ͬͯػցతʹϒϩοΫ
    ͢Δʯ͘͠ΈͱʮϢʔβʔͷૢ࡞ͳͲͷίϯ
    ςΩετΛՃຯͯ͠దٓ؇࿨͢Δʯ͘͠ΈͰ
    ͏·͘όϥϯεΛऔΖ͏ͱ͍ͯ͠Δҹ৅
    ·ͱΊ

    View Slide