Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Chromium版EdgeのTracking Prevention機能 / Tracking Prevention in Chromium-based Microsoft Edge

Chromium版EdgeのTracking Prevention機能 / Tracking Prevention in Chromium-based Microsoft Edge

Shingo Yamazaki

February 19, 2020
Tweet

More Decks by Shingo Yamazaki

Other Decks in Programming

Transcript

  1. Chromium൛Microsoft Edgeͷ
    Tracking Preventionػೳ

    View full-size slide

  2. • Shingo Yamazaki
    • Cybozu, Inc.
    About me
    zaki-yama
    zaki___yama

    View full-size slide

  3. • PWA Night vol.13 ʙWebϒϥ΢β࠷લઢʙ
    ͱ͍͏ΠϕϯτͰ͓࿩͢Δ༧ఆͩͬͨ಺༰ͷ
    Ұ෦Ͱ͢
    • Chromium൛MS Edgeʹ͍ͭͯҎલϒϩάʹ
    ·ͱΊͨ಺༰ͷ͏ͪɺTracking Preventionʹ
    ͍ͭͯ·ͱΊ௚ͨ͠΋ͷ
    ͜ͷεϥΠυʹ͍ͭͯ

    View full-size slide

  4. Tracking PreventionҎ֎ͷ৘ใ͸
    ϒϩάΛ͝ࢀর͍ͩ͘͞
    ɹɾϩʔϧΞ΢τܭը
    ɹɾ*&Ϟʔυ
    ɹɾ$PMMFDUJPOTػೳ
    ɹFUD
    https://dackdive.hateblo.jp/entry/2020/02/06/090000

    View full-size slide

  5. ओͳ৘ใݯ
    2019೥6݄ͷهࣄ
    ػೳͷ֓ཁ঺հ
    2019೥10݄ͷهࣄ
    Ξοϓσʔτ಺༰

    View full-size slide

  6. Tracking Prevention ͱ͸
    ͳʹ͔

    View full-size slide

  7. ઃఆ > ϓϥΠόγʔͱαʔϏε

    View full-size slide

  8. • จࣈ௨Γ”τϥοΩϯά๷ࢭػೳ”
    • τϥοΧʔαΠτ͕ɺϢʔβʔͷࣝผ͓Αͼߦಈ௥੻ͷͨ
    Ίʹϒϥ΢βʹ৘ใΛอଘ͠Α͏ͱ͢ΔͷΛ๷ࢭ͢Δػೳ
    • ଟ͘͸๚໰ͨ͠αΠτͦͷ΋ͷͰ͸ͳ͘ɺͦͷαΠτͰ
    ಡΈࠐΜͰ͍ΔผυϝΠϯͷϦιʔε
    • جຊ/όϥϯε/ߴϨϕϧɹͷ3ͭͷϨϕϧ͕ఏڙ͞Ε͓ͯ
    ΓɺσϑΥϧτ͸ “όϥϯε”
    Tracking Prevention

    View full-size slide

  9. Tracking Prevention͕ߦ͏͜ͱ

    3FTUSJDU
    TUPSBHF
    BDDFTT

    #MPDL
    SFTPVSDF
    MPBET

    View full-size slide

  10. τϥοΧʔͱ൑ఆ͞ΕͨαΠτ͔ΒಡΈࠐΜͩϦιʔε͕ɺετϨʔδʹ
    ΞΫηε͢ΔͷΛϒϩοΫ͢Δ
    1. Restrict storage access
    BDPN
    USBDLFSDPN USBDLFSDPN4FSWFS
    $PPLJFͷอଘ
    MPDBM4UPSBHF΁ͷΞΫηε
    FUD

    View full-size slide

  11. τϥοΧʔͱ൑ఆ͞ΕͨαΠτͷϦιʔεΛͦ΋ͦ΋ಡΈࠐ·ͳ͍

    (“we may block that load before the request reaches the network”)
    2. Block resource loads
    BDPN
    USBDLFSDPN USBDLFSDPN4FSWFS

    View full-size slide

  12. Tracking Preventionͷྫ

    View full-size slide

  13. ΞυϨεόʔͷ伴ΞΠίϯ͔Β
    ֬ೝͰ͖Δ

    View full-size slide

  14. Tracking Preventionͷ
    ͘͠Έ

    View full-size slide

  15. ෳ਺ͷ͘͠ΈΛ૊Έ߹Θ࣮ͤͯݱ͍ͯ͠Δ
    Ͳ͏͍͏͘͠Έʁ

    $MBTTJpDBUJPO

    4JUF
    FOHBHFNFOU

    0SHBOJ[BUJPOT

    View full-size slide

  16. • ͋ΔυϝΠϯ͕
    • τϥοΧʔ͔Ͳ͏͔
    • Ͳ͏͍͏ΧςΰϦͷτϥοΧʔ͔
    • Λ෼ྨ͢Δ͘͠Έ
    • ެࣜϒϩάʹΑΔͱɺDisconnectࣾͷϦετΛ࢖༻͍ͯ͠ΔΒ͠
    ͍
    1. Classification

    View full-size slide

  17. https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/

    View full-size slide


  18. https://disconnect.me/trackerprotection#categories-of-trackers

    View full-size slide

  19. • ϒϩοΫ͢ΔΧςΰϦʔΛ૿΍ͤ͹૿΍͢΄Ͳ҆શʹ
    ͸ͳΔ͕ɺຊདྷϒϩοΫ͢΂͖Ͱͳ͍΋ͷ·Ͱϒϩο
    Ϋͯ͠αΠτͷಈ͖Λյͯ͠͠·͏ͱ͍͏τϨʔυΦ
    ϑ
    • “such as federated login or embedded social
    media content.”
    • →੍ݶΛ؇࿨͢ΔͨΊͷผͷ͘͠Έͱͯ͠2΍3͕͋Δ
    1. Classification

    View full-size slide

  20. • αΠτʹର͢ΔϢʔβʔͷΤϯήʔδϝϯτΛɺϢʔβʔͷߦಈΛ
    ݩʹείΞϦϯά͢Δ͘͠Έ
    • ϢʔβʔͷߦಈɿαΠτͷӾཡճ਺ɾ଺ࡏ࣌ؒɾϝσΟΞͷ࠶ੜ
    ͳͲ
    • 0 ʙ 100఺Ͱߴ͍΄ͲΤϯήʔδϝϯτߴ
    • ܭࢉ͸୺຤ϩʔΧϧʹͷΈอଘ͞ΕΔʢͷͰɺ୺຤ؒͰಉظ͸͠ͳ
    ͍ʣ
    • edge://site-engagement ͔ΒݱࡏͷείΞΛ֬ೝͰ͖Δ
    2. Site engagement

    View full-size slide

  21. edge://site-engagement ͷྫ

    View full-size slide

  22. • ͋Δ૊৫͕ෳ਺ͷυϝΠϯ͔ΒίϯςϯπΛ഑৴͍ͯ͠Δ
    ৔߹ɺޡ൑ఆͯ͠Ұ෦ͷυϝΠϯͷϦιʔεΛϒϩοΫ͠ͳ
    ͍ͨΊͷ͘͠Έ
    • ෳ਺ͷυϝΠϯΛOrganizationͱ͍͏୯ҐͰ಺෦Ͱάϧʔϐ
    ϯά͓ͯ͘͠
    • ͍ͣΕ͔ͷυϝΠϯͷSite Engagement͕͖͍͠஋Ҏ্Ͱ͋
    Ε͹ɺυϝΠϯΛ·͙ͨϦιʔεಡΈࠐΈͷ੍ݶΛ؇࿨͢Δ
    3. Organizations

    View full-size slide

  23. ͋Δ૊৫͕ org1.com ͱ org1-cdn.com ͱ͍͏υϝΠϯΛอ༗͍ͯ͠Δ
    Organizationsͷྫ
    PSHDPN
    PSHDEODPN
    PSHDEODPN4FSWFS
    $PPLJFͷอଘ
    MPDBM4UPSBHF΁ͷΞΫηε
    FUD
    PSHDPN4FSWFS

    View full-size slide

  24. Edge͕ org1.com ͱ org1-cdn.com ΛಉҰOrganizationͱ൑ఆ͍ͯͯ͠ɺ
    ͍ͣΕ͔ͷυϝΠϯʹର͢ΔSite Engagement͕͖͍͠஋Ҏ্Ͱ͋Ε͹

    υϝΠϯΛ·͙ͨϦιʔεಡΈࠐΈͷ੍ݶ͸؇࿨͞ΕΔ
    Organizationsͷྫ
    PSHDPN
    PSHDEODPN
    PSHDEODPN4FSWFS
    PSHDPN4FSWFS

    View full-size slide

  25. ಉҰOrganization͡Όͳͯ͘΋

    Site engagement͕͖͍͠஋Λ௒͍͑ͯΕ͹

    Ұ࣌తʹڐՄ͞ΕΔʁ

    https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/

    View full-size slide

  26. 3ͭͷϨϕϧʹΑΔҧ͍

    View full-size slide

  27. https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/

    View full-size slide

  28. https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/
    $MBTTJpDBUJPOͰ෼ྨ͞Εͨ
    τϥοΧʔͷΧςΰϦ

    View full-size slide

  29. https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/
    4TUPSBHFBDDFTTΛϒϩοΫ
    #TUPSBHFBDDFTT΋SFTPVSDFMPBET΋ϒϩοΫ
    ϒϩοΫͳ͠

    View full-size slide

  30. https://blogs.windows.com/msedgedev/2019/12/03/improving-tracking-prevention-microsoft-edge-79/
    ͨͱ͑͹ɺ&EHF࣌఺Ͱ͸
    "OBMZUJDTΧςΰϦʔͷτϥοΧʔ͸
    ɾʮόϥϯε #BMBODFE
    ʯͩͱϒϩοΫͳ͠
    ɾʮߴϨϕϧ 4USJDU
    ʯͩͱTUPSBHFBDDFTTͷϒϩοΫ͋Γ

    View full-size slide

  31. • ৽͍͠ChromiumϕʔεͷEdgeʹ͸ɺτϥο
    ΩϯάΛ๷ࢭ͢Δػೳ͕උΘ͍ͬͯΔ
    • ʮϒϥοΫϦετΛ࢖ͬͯػցతʹϒϩοΫ
    ͢Δʯ͘͠ΈͱʮϢʔβʔͷૢ࡞ͳͲͷίϯ
    ςΩετΛՃຯͯ͠దٓ؇࿨͢Δʯ͘͠ΈͰ
    ͏·͘όϥϯεΛऔΖ͏ͱ͍ͯ͠Δҹ৅
    ·ͱΊ

    View full-size slide