On 12/10/2018 18:20, [email protected] wrote:
Hi, I recently released the site https://revddit.com which allows users to 
review content of theirs that has been removed from reddit.

It does not require any sort of login and does its analysis using data that is 
publicly visible on reddit. I don't even have Google Analytics enabled at this 
point.

When I use Firefox to visit the site with Tracking Protection enabled, it is 
prevented from querying reddit:

http://i.imgur.com/yfapYtq.png

I assume I could write some code instructing users who receive this error to 
disable Tracking Protection, however that seems like a strange message.

My question is, does "Tracking Protection" cast too wide a net?

The code for this site is open source. If I can convince Firefox users that I'm 
not tracking them, and they disable this feature, would they be likely to 
re-enable it?

Perhaps I do not understand this feature. Any guidance would be appreciated.

Regards,

Rob


The feature is (in this case) preventing Reddit from tracking users of
your service.

The thing that triggers this is that you have coded your site to make
the user's browser query reddit, thereby telling Reddit that the user is
using your service.

But given the specific URL shown in your error message, it appears that
you are authenticating that the user is logged in on Reddit using the
account that is about to be looked at, so contacting Reddit may be
unavoidable.

Since the error message also reference "CORS", you may be able to mark
the request as allowed via various web standards that exist under the
"CORS" name. I don't know that part of the Web Standards closely enough to tell you how that would work.


Enjoy

Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S.  https://www.wisemo.com
Transformervej 29, 2860 Søborg, Denmark.  Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded
_______________________________________________
dev-privacy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-privacy

Reply via email to