Subject: [domainrep] safe browsing thing & privacy

From: Stephen Farrell <[email-masked]>
Date: Thu, 12 Aug 2010 12:50:49 +0100

I was wondering how that safe browsing thing in FF works
and found a relevant link. [1]

I guess its a slightly different problem, (its a blacklist),
but given that they manage to make it work its interesting
I think. Presumably one could do almost the same things
to talk to a reputation provider.

We should probably note the privacy considerations - this
works by sending chunks of lists to clients, so that clients
don't have to send URLs to the server. I wonder if the
protocol we're working towards would also need to (be able
to) operate in some equally privacy-friendly manner? (DNS
would probably be ok in that respect, but an angle-bracket
approach might have to do lots more.)

S.

[1] http://code.google.com/p/google-safe-browsing/wiki/Protocolv2Spec