decentraleyes
decentraleyes copied to clipboard
Synzvato
Ideas for the future of the extension
In the following comments there are ideas, feel free to vote and add more.
1 Download scripts not from CDNs but from their original sources in VCS. I mean that because the scripts are cached locally there is no need to get them from CDNs anymore, you can get the most recent minor (according to semantic versioning major versions can break compatibility) versions from VCSs.
2 Mitigate tracking. a) the CDN gives you a script with individual tracking identifier b) the script when loaded into any website creates an invisible image sending you the identifier.
To mitigate this you need to download the same script using 2 different identities (for example one as you and another through Tor) and check whether they match.
3 №2 protects from "evercookie" unique to a user, but doesn't protect from time-based evercookies, when a CDN changes the identifier over the time and then determines when each user has cached the content. So you need to download the same content multiple times and check if it matches, and if it doesn't check whether is it version upgrade and use some heuristics to determine if the only effect of version upgrade is changing the identifier.