Re: [webrtc-stats] Exposing RTCIceCandidateStats.networkType might trigger fingerprinting (#374)

I think Justin is referring to using getUserMedia prompt (or getDisplayMedia) as a way to gate access to this stat.

FWIW, I don't think that this specific stat is as mature as the others.
The access model is not good enough right now, the exact definition of what should be exposed could potentially be redefined to decrease fingerprinting while maintaining some level of debuggability.
Also, other information that we currently leak like device labels or IP addresses are leaked to enable a feature for the user at the moment of the leak. The networkType stat is leaked to potentially and very indirectly improve the user experience in the future. This makes it a harder sell.

Given this, I would much prefer that this be moved to an extension spec so that it can mature at its own pace, while we can ship the first version of webrtc-pc and stats. I am happy to do the work, including the initial version of the corresponding extension spec.

-- 
GitHub Notification of comment by youennf
Please view or discuss this issue at https://github.com/w3c/webrtc-stats/issues/374#issuecomment-548571224 using your GitHub account

Received on Thursday, 31 October 2019 21:13:47 UTC