explainers

Interestingly the option has a link to an explanation on how it works. Which was handy as I couldn't get past the German cookie dialogue on the original article. I guess the question is whether the aggregation services can be persuaded by clever attribute manipulation to give the ad site a near unique report for a user across many sites. <https://support.mozilla.org/en-US/kb/privacy-preserving-attr...> <https://datatracker.ietf.org/doc/html/draft-ietf-ppm-dap> <https://github.com/mozilla/explainers/tree/main/ppa-experime...>

I clicked on this with a rebuttal already half-written in my head, but (after skimming the CTO's post and then reading the detailed explanation of PPA[0]) I'll admit that I jumped the gun on assuming that PPA was just the latest name for storing an ad id. The idea behind it (that you have to give the advertisers an anonymous way to measure conversions to have a shot at getting them to give up tying your traffic back to your identity) is reasonable, and the implementation doesn't look crazy. There's details I don't understand yet and I'd like to see someone smarter than me critique the details, but for now I'll put my money where my mouth is by going in to Settings and re-enabling it. 0: https://github.com/mozilla/explainers/tree/main/ppa-experime...

More infos about it: https://blog.mozilla.org/en/mozilla/privacy-preserving-attribution-for-advertising/ https://github.com/mozilla/explainers/tree/main/ppa-experiment https://datatracker.ietf.org/doc/draft-ietf-ppm-dap/ The gist of it is that Mozilla and ISRG now proxy the tracking data and give aggregated reports to advertisers. And that they handle the data in a way so that neither Mozilla nor ISRG alone can access the unaggregated data: Our DAP deployment is jointly run by Mozilla and ISRG. Privacy is lost if the two organizations collude I wonder if this is really the only way privacy can get lost. What if an advertiser uses an ad ID only once for real (specifying a specific user) and then sends 999 fake impression signals for that ID to Mozilla? When they get the aggregated data for the 1000 impressions, th

Some more technical details: https://github.com/mozilla/explainers/tree/main/ppa-experime...

The gist of it seems to be that Mozilla and ISRG now proxy the tracking data and give aggregated reports to advertisers. And that they handle the data in a way so that neither Mozilla nor ISRG alone can access the unaggregated data. From reading around their documents ... https://blog.mozilla.org/en/mozilla/privacy-preserving-attribution-for-advertising/ https://github.com/mozilla/explainers/tree/main/ppa-experiment https://datatracker.ietf.org/doc/draft-ietf-ppm-dap/ ... it sounds a bit like they route the data through something like an onion network. So nodes in the network do not know what data they are routing and the advertisers get aggregated data without knowing who the users were: ... our DAP service, which is a Multiparty Compute (MPC) system based on Prio ... And the "Multiparty" seems to be these two: