[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Public WebGL] about the VENDOR, RENDERER, and VERSION strings
- To: Benoit Jacob <firstname.lastname@example.org>
- Subject: Re: [Public WebGL] about the VENDOR, RENDERER, and VERSION strings
- From: Cedric Vivier <email@example.com>
- Date: Wed, 1 Dec 2010 15:15:53 +0800
- Cc: firstname.lastname@example.org, David Sheets <email@example.com>, public webgl <firstname.lastname@example.org>, Thatcher Ulrich <email@example.com>
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:mime-version:sender:received :in-reply-to:references:from:date:x-google-sender-auth:message-id :subject:to:cc:content-type:content-transfer-encoding; bh=TTfBpxYSFRtjo+s63X8gWPR81OMA1XQBxCs9hyyPAu4=; b=NRBOFBZMSxMWKXtxty4OelVWa5dj0UZ6ClKXZDwvcxtzcGAaDK/dXMRQ7+0irgBkEm 7ZtDWrdaPzj9jMWcoQZVB2gl2p88s7yAGML9boFz7TeLzjCofgihhEI+NYrCwT0YdjBL enDnO1vSMyKAwHY+E1asoVbbBgfplOifSGQH8=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type :content-transfer-encoding; b=dic2kUpu9/n92PExYFm6sIYwjfeTqFDPWYuHNr6Juf3NnoXRXYKzEOAtaqt4/Ym/re dXaiz0M0DCZs6cacIMB/ViBragN6jD7u/THClXdOB9wzlvDCQkThQWCRz9ZksYK9UlLo OSTy0codaWNCBoWS6QGNFjxGK4J2G4URHucEc=
- In-reply-to: <2134003707.445398.1291135962886.JavaMail.firstname.lastname@example.org>
- List-id: Public WebGL Mailing List <public_webgl.khronos.org>
- References: <AANLkTim4MHsCWPb27BH5ffK2VzNPcdf3fCPvX38bo5HH@mail.gmail.com> <2134003707.445398.1291135962886.JavaMail.email@example.com>
- Sender: firstname.lastname@example.org
On Wed, Dec 1, 2010 at 00:52, Benoit Jacob <email@example.com> wrote:
>> Maybe a way to make RENDERER useful while not giving too much bits
>> would be to return the hardware maker and model but strip out driver
> That would be a step in the right direction, but these days GPU manufacturers make many different models.
> For NVIDIA alone, there are at least 200 device IDs relevant to WebGL (OpenGL 2 hardware)
> So I expect the RENDERER string to give roughly 9 bits of information, with an uneven distribution --- some models are less commons and so their owners would be more exposed.
Yes, but then that's also the case for any kind of less common
setups... eg. people using, say, Opera on Linux are already much more
exposed to browser-tracking than people using Internet Explorer on
The way privacy-conscious people workaround this is usually to change
their user-agent string through configuration, this is something that
should be possible as well for WebGL RENDERER string imho.
In general, RENDERER string without driver version would give very
minimal bits considering that the distribution is indeed very uneven
with a strong bias on more popular hardware... and on mobile devices
the number of bits is even lesser considering the lesser number of
designs and the fact that GPU can be inferred by other ways (eg. IOS 4
means PowerVR SGX).
I propose a privacy addition to spec in section 4 (Security), eg :
A WebGL implementation should strip out driver version information (if
any) from the string returned by getParameter(RENDERER).
[non-normative?] An user agent should provide a user configuration
setting to set the RENDERER string returned.
> To put this in perspective, according to panopticlick, once you remove the user agent (i'm on FF nightlies where it's verbose, but in Firefox stable >= 4.0 it's going to give very little information), my worst browser characteristic here is my HTTP_ACCEPT headers and they give 9 bits of info.
> So just RENDERER alone would create a problem equivalent to the worst current problem, assuming that the UserAgent problem gets solved by giving almost no info, see
>> It still provides quite a good information about the hardware
>> capabilities and its relative strengths/weaknesses.
>> In case slowness is detected high-end applications making use of this
>> kind of sniffing can recommend upgrading to latest drivers (in fact
>> that's something WebGL-enabled browsers should do whenever possible).
You are currently subscribed to firstname.lastname@example.org.
To unsubscribe, send an email to email@example.com with
the following command in the body of your email: