Hey Oleg,

I think this is a great suggestion.

The privacy category idea is also interesting is there any other 
interesting settings we could offer users there?

Cheers,
Raihaan

On Wednesday, 28 April 2021 at 16:59:41 UTC+8 Oleg Nenashev wrote:

> Hi all,
>
> As you may have heard, Google is rolling out its FLoC (Federated Learning 
> of Cohorts) tracking system, for advertisement needs. This system is 
> enabled in Google Chrome by default, and it is a corporate standard for 
> many of the Jenkins users. They cannot easily opt out. Yesterday GitHub set 
> a good precedent by disabling FLoC by default 
> <https://github.blog/changelog/2021-04-27-github-pages-permissions-policy-interest-cohort-header-added-to-all-pages-sites/>.
>  
> I think we should do the same.
>
> We can explicitly disable FLoC on Jenkins resources by setting the 
> *Permissions-Policy:* *interest-cohort=() *header in Jenkins 
> distributions by default and on our websites: jenkins.io, 
> plugins.jenkins.io, javadoc, update center, etc., etc..
>
> *Jenkins distributions.* For the Jenkins core, it is a small patch adding 
> additional headers (e.g. here 
> <https://github.com/jenkinsci/jenkins/blob/0fd55bd6b50fcdf27368c6b771fb3d8363a24f83/core/src/main/java/hudson/Functions.java#L2273-L2289>).
>  
> Probably we should introduce the new "Privacy" category in the "Manage 
> Security" screen for better UX, but this particular control should be also 
> manageable by system properties so that the settings always apply.
>
> *Jenkins Infa.*  For our infra, It should be easy to do for resources 
> we host in the main infra Kubernetes cluster. Although in some cases it may 
> prevent Jenkins-friendly (or not) advertisements from popping up for users, 
> I think we should rather put privacy first and disable FLoC on our 
> resources. Google Analytics might also be a subject for removal, but I 
> suggest to have a separate thread about it
>
> What do you think?
>
> References:
>
>    - https://www.eff.org/deeplinks/2021/03/googles-floc-terrible-idea
>    - 
>    
> https://github.blog/changelog/2021-04-27-github-pages-permissions-policy-interest-cohort-header-added-to-all-pages-sites/
>    
> Best regards,
> Oleg Nenashev
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/997bab4e-f05f-4cac-b007-a25b90c7f77dn%40googlegroups.com.

Reply via email to