๐Ÿฅถ Freezing User Agent

Jake_Youngยท2022๋…„ 6์›” 2์ผ
0
post-thumbnail

ํšŒ์‚ฌ PR ๋ฆฌ๋ทฐ์— "user agent๋ฅผ freezing ํ•˜๋ ค๋ฉด ~~" ์ด๋ผ๋Š” ๋‚ด์šฉ์ด ์žˆ์–ด์„œ ๊ณต๋ถ€ํ•˜๊ฒŒ ๋˜์—ˆ๋‹ค.

์•„๋ž˜๋Š” chromium ํŒ€์˜ ์„ค๋ช…๊ธ€์„ ๋ฒˆ์—ญํ•˜์˜€๋‹ค.
https://groups.google.com/a/chromium.org/g/blink-dev/c/-2JIRNMWJ7s/m/yHe4tQNLCgAJ


(์งง๊ฒŒ ์˜์—ญํ•˜์ž๋ฉด)
User-Agent string์€ ์œ ์ €์— ๋Œ€ํ•ด ๋งŽ์€ ์ •๋ณด๋ฅผ ๊ฐ–๊ณ  ์žˆ๋‹ค.
์ด๋Š” ๋ธŒ๋ผ์šฐ์ €๋‚˜ ๊ธฐ๊ธฐ ์ข…๋ฅ˜ ๋“ฑ์— ๋Œ€ํ•œ ์ƒ์„ธํ•œ ์ •๋ณด๋ฅผ ๋งŽ์ด ๊ฐ–๊ณ  ์žˆ์ง€๋งŒ ๊ฑฐ์ง“ ์ •๋ณด๋„ ๋งŽ์ด ํฌํ•จํ•œ๋‹ค.
์„œ๋ฒ„์—์„œ๋Š” ์ด๋ฅผ ํ† ๋Œ€๋กœ ํ˜ธํ™˜์„ฑ๊ณผ ๊ฐ™์€ ๋ถ€๋ถ„์„ ์ฒ˜๋ฆฌํ•˜๊ณ  ์žˆ๋‹ค.

๊ทธ๋Ÿฐ๋ฐ ์œ ๋ช…ํ•˜์ง€ ์•Š์€ ๋ธŒ๋ผ์šฐ์ €์—์„œ๋Š” ํŠนํžˆ๋‚˜ User-Agent๊ฐ€ ์ž˜๋ชป๋œ ์ •๋ณด๋“ค์„ ๊ฐ–๊ณ  ์žˆ์–ด์„œ ์‚ฌ์ดํŠธ๊ฐ€ ์ œ๋Œ€๋กœ ๋™์ž‘ํ•˜์ง€ ์•Š๋Š” ๊ฒฝ์šฐ๊ฐ€ ์žˆ๋‹ค.

์ด๋Ÿฐ ์ด์œ ๋กœ UA string์„ ๊ณ ์ •์‹œํ‚ค๋Š” ์ƒˆ๋กœ์šด ๋ฐฉ์‹์„ ๊ณ ์•ˆํ•˜๊ฒŒ ๋˜์—ˆ๋‹ค.


The User-Agent string is an abundant source of passive fingerprinting information about our users. It contains many details about the userโ€™s browser and device as well as many lies ("Mozilla/5.0", anyone?) that were or are needed for compatibility purposes, as servers grew reliant on bad User Agent sniffing.

On top of those privacy issues, User-Agent sniffing is an abundant source of compatibility issues, in particular for minority browsers, resulting in browsers lying about themselves (generally or to specific sites), and sites (including Google properties) being broken in some browsers for no good reason.

The above abuse makes it desirable to freeze the UA string and replace it with a better mechanism.

profile
์ž๋ฐ”์Šคํฌ๋ฆฝํŠธ์™€ ํŒŒ์ด์ฌ ๊ทธ๋ฆฌ๊ณ  ์ปดํ“จํ„ฐ์™€ ๋„คํŠธ์›Œํฌ

0๊ฐœ์˜ ๋Œ“๊ธ€