We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Rechercher dans l’assistance

Évitez les escroqueries à l’assistance. Nous ne vous demanderons jamais d’appeler ou d’envoyer un SMS à un numéro de téléphone ou de partager des informations personnelles. Veuillez signaler toute activité suspecte en utilisant l’option « Signaler un abus ».

En savoir plus

Ce sujet de discussion a été archivé. Veuillez poser une nouvelle question si vous avez besoin d’aide.

Accept-language header in private mode

Chelovek
Chelovek
more options

Is there any setting to stop accept-language header request, or change it to default in Private mode, with tracking protection enabled.

from https://w3ctag.github.io/private-mode/ drafts Browsers in private mode MUST NOT emit any of the following request header fields: Accept, Accept-Language ...

Is there any setting to stop accept-language header request, or change it to default in Private mode, with tracking protection enabled. from https://w3ctag.github.io/private-mode/ drafts Browsers in private mode MUST NOT emit any of the following request header fields: Accept, Accept-Language ...

Toutes les réponses (1)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 10 Contributor
more options

Whose draft is that? It seems rather extreme, but I guess that would be a comment for the discussion thread: https://github.com/w3ctag/design-reviews/issues/101

I notice the stated purpose of that section of restrictions is:

Maintaining server privacy means limiting its ability to identify the user, through "fingerprinting" the client, or associating the user's behavior on one site with that on another (using a mechanism like cookies).

I'm not aware of any preferences that modulate the HTTP headers sent in private mode. There may be extensions that can do that.

There is a preference in testing called privacy.resistFingerprinting which may have some of those effects. However, users have reported some website breakage with that setting, so it probably needs further development. It is expected to be "turned on" in Firefox 59.

More info: https://wiki.mozilla.org/Security/Fingerprinting