Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up
for free
Chromium版EdgeのTracking Prevention機能 / Tracking Prevention in Chromium-based Microsoft Edge
Shingo Yamazaki
February 19, 2020
Programming
0
1k
Chromium版EdgeのTracking Prevention機能 / Tracking Prevention in Chromium-based Microsoft Edge
Shingo Yamazaki
February 19, 2020
Tweet
Share
More Decks by Shingo Yamazaki
See All by Shingo Yamazaki
zakiyama
0
130
zakiyama
0
480
zakiyama
2
590
zakiyama
0
3.3k
zakiyama
1
800
zakiyama
5
2.7k
zakiyama
0
100
zakiyama
0
120
Other Decks in Programming
See All in Programming
mrtc0
2
950
sters
2
130
dbrumann
0
110
layzee
1
200
christianliebel
PRO
0
130
morimorihoge
1
150
mihyaeru21
0
360
line_developers_tw2
0
3.9k
meemeelab
0
280
lovee
2
180
joergneumann
0
120
mehowte
0
180
Featured
See All Featured
moore
125
21k
erikaheidi
14
4.3k
afnizarnur
176
14k
smashingmag
230
18k
marktimemedia
7
390
keavy
107
14k
lauravandoore
437
28k
rocio
155
11k
mongodb
23
3.9k
nonsquared
81
3.4k
sachag
446
36k
kneath
294
39k
Transcript
Chromium൛Microsoft Edgeͷ Tracking Preventionػೳ
• Shingo Yamazaki • Cybozu, Inc. About me zaki-yama zaki___yama
• PWA Night vol.13 ʙWebϒϥβ࠷લઢʙ ͱ͍͏ΠϕϯτͰ͓͢Δ༧ఆͩͬͨ༰ͷ Ұ෦Ͱ͢ • Chromium൛MS Edgeʹ͍ͭͯҎલϒϩάʹ
·ͱΊͨ༰ͷ͏ͪɺTracking Preventionʹ ͍ͭͯ·ͱΊͨ͠ͷ ͜ͷεϥΠυʹ͍ͭͯ
Tracking PreventionҎ֎ͷใ ϒϩάΛ͝ࢀর͍ͩ͘͞ ɹɾϩʔϧΞτܭը ɹɾ*&Ϟʔυ ɹɾ$PMMFDUJPOTػೳ ɹFUD https://dackdive.hateblo.jp/entry/2020/02/06/090000
ओͳใݯ 20196݄ͷهࣄ ػೳͷ֓ཁհ 201910݄ͷهࣄ Ξοϓσʔτ༰
Tracking Prevention ͱ ͳʹ͔
ઃఆ > ϓϥΠόγʔͱαʔϏε
• จࣈ௨Γ”τϥοΩϯάࢭػೳ” • τϥοΧʔαΠτ͕ɺϢʔβʔͷࣝผ͓Αͼߦಈͷͨ ΊʹϒϥβʹใΛอଘ͠Α͏ͱ͢ΔͷΛࢭ͢Δػೳ • ଟ͘๚ͨ͠αΠτͦͷͷͰͳ͘ɺͦͷαΠτͰ ಡΈࠐΜͰ͍ΔผυϝΠϯͷϦιʔε • جຊ/όϥϯε/ߴϨϕϧɹͷ3ͭͷϨϕϧ͕ఏڙ͞Ε͓ͯ
ΓɺσϑΥϧτ “όϥϯε” Tracking Prevention
Tracking Prevention͕ߦ͏͜ͱ 3FTUSJDU TUPSBHF BDDFTT #MPDL SFTPVSDF MPBET
τϥοΧʔͱఆ͞ΕͨαΠτ͔ΒಡΈࠐΜͩϦιʔε͕ɺετϨʔδʹ ΞΫηε͢ΔͷΛϒϩοΫ͢Δ 1. Restrict storage access BDPN USBDLFSDPN USBDLFSDPN4FSWFS $PPLJFͷอଘ
MPDBM4UPSBHFͷΞΫηε FUD
τϥοΧʔͱఆ͞ΕͨαΠτͷϦιʔεΛͦͦಡΈࠐ·ͳ͍ (“we may block that load before the request reaches
the network”) 2. Block resource loads BDPN USBDLFSDPN USBDLFSDPN4FSWFS
Tracking Preventionͷྫ
ΞυϨεόʔͷ伴ΞΠίϯ͔Β ֬ೝͰ͖Δ
Tracking Preventionͷ ͘͠Έ
ෳͷ͘͠ΈΛΈ߹Θ࣮ͤͯݱ͍ͯ͠Δ Ͳ͏͍͏͘͠Έʁ $MBTTJpDBUJPO 4JUF FOHBHFNFOU 0SHBOJ[BUJPOT
• ͋ΔυϝΠϯ͕ • τϥοΧʔ͔Ͳ͏͔ • Ͳ͏͍͏ΧςΰϦͷτϥοΧʔ͔ • Λྨ͢Δ͘͠Έ • ެࣜϒϩάʹΑΔͱɺDisconnectࣾͷϦετΛ༻͍ͯ͠ΔΒ͠
͍ 1. Classification
https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/
… https://disconnect.me/trackerprotection#categories-of-trackers
• ϒϩοΫ͢ΔΧςΰϦʔΛ૿ͤ૿͢΄Ͳ҆શʹ ͳΔ͕ɺຊདྷϒϩοΫ͖͢Ͱͳ͍ͷ·Ͱϒϩο Ϋͯ͠αΠτͷಈ͖Λյͯ͠͠·͏ͱ͍͏τϨʔυΦ ϑ • “such as federated login
or embedded social media content.” • →੍ݶΛ؇͢ΔͨΊͷผͷ͘͠Έͱͯ͠23͕͋Δ 1. Classification
• αΠτʹର͢ΔϢʔβʔͷΤϯήʔδϝϯτΛɺϢʔβʔͷߦಈΛ ݩʹείΞϦϯά͢Δ͘͠Έ • ϢʔβʔͷߦಈɿαΠτͷӾཡճɾࡏ࣌ؒɾϝσΟΞͷ࠶ੜ ͳͲ • 0 ʙ 100Ͱߴ͍΄ͲΤϯήʔδϝϯτߴ
• ܭࢉϩʔΧϧʹͷΈอଘ͞ΕΔʢͷͰɺؒͰಉظ͠ͳ ͍ʣ • edge://site-engagement ͔ΒݱࡏͷείΞΛ֬ೝͰ͖Δ 2. Site engagement
edge://site-engagement ͷྫ
• ͋Δ৫͕ෳͷυϝΠϯ͔ΒίϯςϯπΛ৴͍ͯ͠Δ ߹ɺޡఆͯ͠Ұ෦ͷυϝΠϯͷϦιʔεΛϒϩοΫ͠ͳ ͍ͨΊͷ͘͠Έ • ෳͷυϝΠϯΛOrganizationͱ͍͏୯ҐͰ෦Ͱάϧʔϐ ϯά͓ͯ͘͠ • ͍ͣΕ͔ͷυϝΠϯͷSite Engagement͕͖͍͠Ҏ্Ͱ͋
ΕɺυϝΠϯΛ·͙ͨϦιʔεಡΈࠐΈͷ੍ݶΛ؇͢Δ 3. Organizations
͋Δ৫͕ org1.com ͱ org1-cdn.com ͱ͍͏υϝΠϯΛอ༗͍ͯ͠Δ Organizationsͷྫ PSHDPN PSHDEODPN PSHDEODPN4FSWFS $PPLJFͷอଘ
MPDBM4UPSBHFͷΞΫηε FUD PSHDPN4FSWFS
Edge͕ org1.com ͱ org1-cdn.com ΛಉҰOrganizationͱఆ͍ͯͯ͠ɺ ͍ͣΕ͔ͷυϝΠϯʹର͢ΔSite Engagement͕͖͍͠Ҏ্Ͱ͋Ε υϝΠϯΛ·͙ͨϦιʔεಡΈࠐΈͷ੍ݶ؇͞ΕΔ Organizationsͷྫ PSHDPN
PSHDEODPN PSHDEODPN4FSWFS PSHDPN4FSWFS
ಉҰOrganization͡Όͳͯ͘ Site engagement͕͖͍͠Λ͍͑ͯΕ Ұ࣌తʹڐՄ͞ΕΔʁ https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/
3ͭͷϨϕϧʹΑΔҧ͍
https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/
https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/ $MBTTJpDBUJPOͰྨ͞Εͨ τϥοΧʔͷΧςΰϦ
https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/ 4TUPSBHFBDDFTTΛϒϩοΫ #TUPSBHFBDDFTTSFTPVSDFMPBETϒϩοΫ ϒϩοΫͳ͠
https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/ ͨͱ͑ɺ&EHF࣌Ͱ "OBMZUJDTΧςΰϦʔͷτϥοΧʔ ɾʮόϥϯε #BMBODFE ʯͩͱϒϩοΫͳ͠ ɾʮߴϨϕϧ 4USJDU ʯͩͱTUPSBHFBDDFTTͷϒϩοΫ͋Γ
·ͱΊ
• ৽͍͠ChromiumϕʔεͷEdgeʹɺτϥο ΩϯάΛࢭ͢Δػೳ͕උΘ͍ͬͯΔ • ʮϒϥοΫϦετΛͬͯػցతʹϒϩοΫ ͢Δʯ͘͠ΈͱʮϢʔβʔͷૢ࡞ͳͲͷίϯ ςΩετΛՃຯͯ͠దٓ؇͢Δʯ͘͠ΈͰ ͏·͘όϥϯεΛऔΖ͏ͱ͍ͯ͠Δҹ ·ͱΊ