[Webkit-unassigned] [Bug 67071] Feature Request: Private Browsing initiated by server header.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Aug 26 23:01:19 PDT 2011


https://bugs.webkit.org/show_bug.cgi?id=67071





--- Comment #2 from Philip Clarke <nod at howtogetdivorced.com>  2011-08-26 23:01:19 PST ---
A short cache timeout or not setting cookies is reliant on the web master and is also covered by the submission to the w3c by microsoft 

http://www.w3.org/Submission/web-tracking-protection/

which deals with the user being able to request that a website not track them through cookies and the browser sending a header.

This is the opposite way around. The server sends the header, and the browser makes a note to purges it's history of the value set in the Host header from the cache and all cookies received from that location when the window is closed, which is the behaviour of a "Private Browsing" session in Firefox or "Incognito" session in Chrome (webkit based I believe). Except this goes further. 

Let's suppose one visits the local police station, one may be doing so because one wants to get information, or one wants to report a crime. For the police website either 
    the header "X-privacy: Private" should be set on the crime reporting page and then the browser retrospectively clears the cache and cookies for that domain (and there is probably a good case for disabling bookmarking).
    Or the entire website runs a header "X-privacy: Optional" which pops up an alert box asking the user if they want a private browser session.

This is more to do with what the user cannot do easily themselves across a range of browsers rather than asking the website to not track them (set cookies) or "hoping" that the browser is going to respect Cache-Control headers and expire the pages. Except most people reporting abuse or crime are going to be more concerned with other matters than their browser history settings.

Thank you.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list