Smart Tracking Protection

[tildelowengrimm]

We should intelligently block unexpected tracking by avoiding state from origins the user isn't trying to visit. Safari has a similar feature: https://webkit.org/blog/8311/intelligent-tracking-prevention-2-0/

Replaces brave/browser-laptop#10983

---

Here are the sub-tasks for this project so far:

• Sync the smart-tracking-lists locally at regular intervals #802
• Block storage from first party trackers  #803

[ghost]

Lots of updates since that initial post: https://webkit.org/blog/category/privacy/

https://webkit.org/blog/9661/preventing-tracking-prevention-tracking/ new tidbits that webkit has implemented to prevent sites from tracking the prevention of tracking. interestingly, google is helping them design it.

• Origin-Only Referrer For All Third-Party Requests
• All Third-Party Cookies Blocked on Websites Without Prior User Interaction
• The Storage Access API Takes the Underlying Cookie Policy Into Consideration
• Absence of Cookies In Third-Party Requests Does Not Reveal ITP Status

[pes10k]

FWIW, Google is most def not helping them design it. Google was exploiting a bug that would bypass, WebKit folks noticed it and plugged the hole. The comment is shade 😎

[bsclifton]

Closing as stale - this was a really great effort... but hasn't had any movement. We can always re-open or create a new issue if we wanted to pick it up again