Re: [admin] Consensus Call: Adopting Privacy-Preserving Attribution into PATCG (#26)

@dmarti, this is the first time that anyone in this group has seriously suggested the use of AdMAP.  I was aware of efforts to build clean room solutions in IAB Tech Lab, but dismissed them.  Clean room options generally do not meet the principles we have set out.  AdMAP in its current form is completely unacceptable to Mozilla for that reason alone, though there are a number of things I can see offhand that seem likely introduce major problems[^1].

[^1]: I don't think it is a good use of time to seek to enumerate these given the vague nature of the proposal.  However, I will observe that the mapping system that is described is very vague.  Any system that seeks to provide genuine privacy would need to have a thorough and complete description of this component.  In the years we've been working on IPA, we have learned that this component is extremely hard -- if not impossible -- to get right.  I say this because there is a private set intersection design presented, which might be very similar to the first iteration of IPA.  We found that design to be vulnerable to a number of very serious attacks.

I can't test your claim about fraud mitigation in AdMAP.  The v1.0 specification you cite doesn't appear to have any material on that (the words "fraud or "steal" both get zero hits in the document).

For me to take this proposal more seriously, I would expect that a proponent (you, perhaps) would do the work to develop a more credible proposal, along the lines that @wbl describes.  It sounds like what you have in mind wouldn't be very much like AdMAP v1.0 at all anyway.

That leaves me with the conclusion that an objection to adopting the API is a suggestion that we continue to delay.  I can't support that outcome.

-- 
GitHub Notification of comment by martinthomson
Please view or discuss this issue at https://github.com/patcg/admin/issues/26#issuecomment-2421288311 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Friday, 18 October 2024 04:02:55 UTC