Skip to content

Commit

Permalink
moved the new text about fingerprinting mitigation out of notes and i…
Browse files Browse the repository at this point in the history
…nto the main text of the overview's implementation dependencies section
  • Loading branch information
ben-allen committed Oct 12, 2023
1 parent 0d65b78 commit 7edd7fb
Showing 1 changed file with 6 additions and 8 deletions.
14 changes: 6 additions & 8 deletions spec/overview.html
Original file line number Diff line number Diff line change
Expand Up @@ -72,14 +72,12 @@ <h1>Implementation Dependencies</h1>
<em>Subsets of Unicode:</em> Some operations, such as collation, operate on strings that can include characters from the entire Unicode character set. However, both the Unicode Standard and the ECMAScript standard allow implementations to limit their functionality to subsets of the Unicode character set. In addition, locale conventions typically don't specify the desired behaviour for the entire Unicode character set, but only for those characters that are relevant for the locale. While the Unicode Collation Algorithm combines a default collation order for the entire Unicode character set with the ability to tailor for local conventions, subsets and tailorings still result in differences in behaviour.
</li>
</ul>

<emu-note>
The initial set of locales, currencies, calendars, numbering systems, and other enumerable items visible to a particular origin must be the same for all users sharing the same user agent string (engine and platform version). Furthermore, dynamic changes to these sets must not result in users becoming distinguishable from each other. This constraint is imposed to reduce the fingerprinting risk inherent in internationalization, and may be relaxed in future revisions.
</emu-note>

<emu-note>
Non-normative: As a result of this constraint, the first time a browser implementation that allows on-demand locale installation receives a request from a particular origin that could require installing a new locale, it must not reveal whether or not that locale is already installed.
</emu-note>
<p>
In browser implementations the initial set of locales, currencies, calendars, numbering systems, and other enumerable items visible to a particular origin must be the same for all users sharing the same user agent string (engine and platform version). Furthermore, dynamic changes to these sets must not result in users becoming distinguishable from each other. This constraint is imposed to reduce the fingerprinting risk inherent in internationalization, and may be relaxed in future revisions.
</p>
<p>
As a result of this constraint, the first time a browser implementation that allows on-demand locale installation receives a request from a particular origin that could require installing a new locale, it must not reveal whether or not that locale is already installed.
</p>

<emu-clause id="sec-compatibility">
<h1>Compatibility across implementations</h1>
Expand Down

0 comments on commit 7edd7fb

Please sign in to comment.