Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.Sign up
Privacy Badger blocks Matrix homeservers / Riot Web and related services #2480
What is your browser and browser version?
Firefox 70.0b14 (64)
What is broken and where?
All Matrix protocol homeservers, personally I have experienced this on on matrix.org and chat.privacytools.io. I have accessed them using riot.im/app (and /staging and /develop), riot.privacytools.io and possibly also riot.t2host.io. This results to Riots telling me that there was an problem connecting the homeserver and asking if the homeserver is up.
As Matrix is a federated service that anyone can selfhost, I don't think this issue can be resolved by shipping lists of Matrix homeservers.
I have suggested Privacytools.io to adapt a DNT policy and the admin responded:
I also asked this on Riot Web support room and I was told that privacy badger blocks domains when 3 different sites connect to it, which happenh can happen often with Riot/Matrix and that the FAQ entry cannot work (which I understand that Riot/Matrix cannot apply the DNT policy), because it would break session persistence.
I said here that I would be opening an issue asking what should be done in these cases?
What is the "culprit" domain?
Sorry, it's too late night for me to understand those instructions, I will try later. I have noticed #963 which I hope will make this easier.
What is your debug output for this domain?
Hello and thanks for the report!
I think there is a misunderstanding here somewhere ... I don't see how declaring that a particular domain doesn't track users would break session persistence.
A company wouldn't knowingly want to engage in this sort of behavior as it will put itself in legal jeopardy. Furthermore, if we see abuse of the EFF DNT policy, we'll deal it with it then.
If you don't want your Privacy Badger to act as a political tool, feel free to uncheck the two DNT checkboxes on Privacy Badger's options page.