Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add privacy and security mitigations #47

Open
wants to merge 5 commits into
base: main
Choose a base branch
from
Open

Conversation

domenic
Copy link
Collaborator

@domenic domenic commented Mar 19, 2025

See individual commits for details.

This is also intended to apply to the two specs in https://github.com/webmachinelearning/translation-api, so the language is somewhat generic (e.g. a lot of discussion of "these APIs"). As with many things in built-in AI, the split across 2-3 repositories is a bit awkward, and I'm choosing for now to centralize the shared stuff into the writing assistance APIs spec.

This won't build until I either eliminate some of the Storage Standard references or get them exported.I've worked around this for now.


Preview | Diff

@domenic domenic changed the title Add various privacy mitigations for download status Add privacy and security mitigations Mar 24, 2025
@domenic domenic force-pushed the user-activation branch 2 times, most recently from 5357735 to 1b85f8e Compare March 24, 2025 04:56
@domenic domenic force-pushed the user-activation branch 3 times, most recently from 045b99c to 112ac45 Compare March 25, 2025 05:57
domenic added 5 commits March 27, 2025 10:46
* Require and consume user activation.
* Explicitly allow the user agent to show a prompt or download UI.
This includes a couple updates to the algorithms, for download status masking and avoiding actual download cancelation, plus extensive discussion of those mitigations and others in the new "Privacy considerations" section.

See webmachinelearning/translation-api#3 and webmachinelearning/translation-api#10.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant