Skip to content

Commit

Permalink
[explainer] Clarify the breakdown of the version string
Browse files Browse the repository at this point in the history
  • Loading branch information
xyaoinum authored Aug 28, 2024
1 parent 2df537b commit 3cb31f5
Showing 1 changed file with 6 additions and 2 deletions.
8 changes: 6 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -71,8 +71,12 @@ The topics will be inferred by the browser. The browser will leverage a classifi
* The request header will not modify state for the caller unless there is a corresponding response header. That is, the topic of the page won't be considered observed, nor will it affect the user's topic calculation for the next epoch.
* The response header will only be honored if the corresponding request included the topics header (or would have included the header if it wasn't empty).
* The registrable domain used for topic observation is that of the url of the request.
* Example request header: `Sec-Browsing-Topics: (123 2);v=chrome.1:1:2, ();p=P0000000`
* This example has two topics, 123 and 2. They are associated with the same version: chrome.1:1:2.
* Example request header: `Sec-Browsing-Topics: (9 102);v=chrome.1:2:5, ();p=P0000000`
* This example has two topics, 9 and 102. They are associated with the same version: `chrome.1:2:5`.
* Version breakdown:
* `chrome.1`: The configuration version that identifies the algorithm (excluding the model part) used to calculate the topics.
* `2`: The version of the taxonomy for the topics.
* `5`: The version of the model used for topics classification.
* It has an additional padding item to make the total header length consistent for different topics callers. Without the padding, an attacker can learn the number of topics for a different origin via the header length, which is often detectable as servers typically have a GET request size limit.
* Example response header: `Observe-Browsing-Topics: ?1`

Expand Down

0 comments on commit 3cb31f5

Please sign in to comment.