How might the browser detect abusive usage of the API to keep the topic dissemination rate in line with expectations? #5

Activity

1. igrigorik commented on Feb 9, 2022

   

   igrigorik

   on Feb 9, 2022

   More actions

   Existing proposal already imposes an upper-bound rate limit...

   It is possible for an entity (or entities) to cooperate across hosts and acquire up to 15 topics per epoch for the same user in the first week.

   Is the intent to explore how to reduce "15 topics per epoch" even further? What are some example scenarios?
2. dmarti commented on Oct 14, 2022

   

   dmarti

   on Oct 14, 2022

   Contributor

   More actions

   One option would be to require each calling domain to obtain a signature from a known organization, and maintain a public repository of signers and their policies for any key shipped with the browser. If a caller violates the policy and uses Topics API for malicious or non-ad purposes, any keys used to sign it could be dropped from the browser. (This is based on the First-Party Sets proposal) (#87)
3. patcg-individual-drafts

   deleted a comment from on Mar 8, 2024
4. duaneking commented on Jan 17, 2025

   

   duaneking

   on Jan 17, 2025

   More actions

   How are you going to protect against historical data being archived an used to track over time without informed consent?