-
Notifications
You must be signed in to change notification settings - Fork 227
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Combining joinAdInterestGroup Calls #188
Comments
From my understanding, successive calls to |
That's possible, though if that were the case I would expect the explainer to read something like "Successive calls to joinAdInterestGroup() will overwrite the previously-stored interest group" |
My message above was more in reference to the actual Chromium implementation (as far as I could check), where successive calls to |
In terms of the current implementation, subsequent calls overwrite all previous data (though updates do not). It's not entirely clear to me if this is actually needed for privacy - if we make sure ads, script requests, and reports are all k-anonymous, and we trust the trusted server, is being able to combine cross-site data in a single InterestGroup's worklet concerning in terms of privacy? I'm not sure it is. |
Hello @MattMenke2 @michaelkleber ! Basically imagine the following setup:
What would be the content of user bidding signal for "ig1" ? Would it be a merged version of both or would the latest version overwrite the initial version ? thanks ! |
@vincent-grosbois if by "update interest group" you mean It's not clear to me from your question whether you are asking about (a) two calls to |
I meant that one yes
|
@vincent-grosbois |
Closing as I believe |
The spec currently reads:
This would allow someone to build up an
interestGroup
across visits to multiple sites. For example, on one site they could setuserBiddingSignals
, on anothertrustedBiddingSignalsKeys
, and on anotherdailyUpdateUrl
, all with the sameowner
andname
.Our understanding was that this was not compatible with the privacy model; this is why #162 proposes
generateBid
be called once per pair of site andowner
, and not once perowner
.Perhaps partial overwriting behavior should be limited to successive calls on the same site? Or simply removed?
The text was updated successfully, but these errors were encountered: