{"action":"created","issue":{"url":"https://api.github.com/repos/EFForg/privacybadgerchrome/issues/781","repository_url":"https://api.github.com/repos/EFForg/privacybadgerchrome","labels_url":"https://api.github.com/repos/EFForg/privacybadgerchrome/issues/781/labels{/name}","comments_url":"https://api.github.com/repos/EFForg/privacybadgerchrome/issues/781/comments","events_url":"https://api.github.com/repos/EFForg/privacybadgerchrome/issues/781/events","html_url":"https://github.com/EFForg/privacybadgerchrome/issues/781","id":142252687,"number":781,"title":"Add list of multi-domain first parties","user":{"login":"catrope","id":260792,"avatar_url":"https://avatars.githubusercontent.com/u/260792?v=3","gravatar_id":"","url":"https://api.github.com/users/catrope","html_url":"https://github.com/catrope","followers_url":"https://api.github.com/users/catrope/followers","following_url":"https://api.github.com/users/catrope/following{/other_user}","gists_url":"https://api.github.com/users/catrope/gists{/gist_id}","starred_url":"https://api.github.com/users/catrope/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/catrope/subscriptions","organizations_url":"https://api.github.com/users/catrope/orgs","repos_url":"https://api.github.com/users/catrope/repos","events_url":"https://api.github.com/users/catrope/events{/privacy}","received_events_url":"https://api.github.com/users/catrope/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/EFForg/privacybadgerchrome/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/EFForg/privacybadgerchrome/milestones/7","html_url":"https://github.com/EFForg/privacybadgerchrome/milestones/Privacy%20Badger%202.0","labels_url":"https://api.github.com/repos/EFForg/privacybadgerchrome/milestones/7/labels","id":1071537,"number":7,"title":"Privacy Badger 2.0","description":"","creator":{"login":"pde","id":479213,"avatar_url":"https://avatars.githubusercontent.com/u/479213?v=3","gravatar_id":"","url":"https://api.github.com/users/pde","html_url":"https://github.com/pde","followers_url":"https://api.github.com/users/pde/followers","following_url":"https://api.github.com/users/pde/following{/other_user}","gists_url":"https://api.github.com/users/pde/gists{/gist_id}","starred_url":"https://api.github.com/users/pde/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pde/subscriptions","organizations_url":"https://api.github.com/users/pde/orgs","repos_url":"https://api.github.com/users/pde/repos","events_url":"https://api.github.com/users/pde/events{/privacy}","received_events_url":"https://api.github.com/users/pde/received_events","type":"User","site_admin":false},"open_issues":26,"closed_issues":17,"state":"open","created_at":"2015-04-17T00:45:30Z","updated_at":"2016-05-25T01:06:28Z","due_on":null,"closed_at":null},"comments":16,"created_at":"2016-03-21T04:19:13Z","updated_at":"2016-06-02T21:00:19Z","closed_at":null,"body":"At the Wikimedia Foundation, we run web sites on a number of different domains that talk to each other and are essentially all the same first party. Privacy Badger recognizes that `en.wikipedia.org` and `de.wikipedia.org` are the same party, but it does not recognize that domains like `commons.wikimedia.org` and `fr.wiktionary.org` are also the same party. This frequently leads Privacy Badger to block AJAX requests from e.g. `*.wikipedia.org` domains to `*.wiktionary.org` domains, which breaks [our unified login system](https://phabricator.wikimedia.org/T108505) and [our new cross-wiki notifications beta feature](https://phabricator.wikimedia.org/T129764).\r\n\r\nPutting our domains on the yellow list doesn't help, because these features are closely tied to user identity so they need cookies for authentication to work. Another way we could work around this is by publishing a DNT policy file, but we can't, at least not right now, since we have our own privacy policy that is almost-but-not-quite DNT-compliant (see [relevant policy paragraph](https://wikimediafoundation.org/wiki/Privacy_policy#Our_Response_to_Do_Not_Track_.28DNT.29_signals) and [FAQ  entry](https://wikimediafoundation.org/wiki/Privacy_policy/FAQ#DNTFAQ)).\r\n\r\nI've been thinking that other web sites probably have a similar issue. For example, a request from `gmail.com` to `*.google.com` should also be treated as a first-party request rather than a third-party request. For that reason I propose adding a list of groups of domains that all belong to the same party, and have Privacy Badger treat a cross-domain request within the same domain group as a first-party request (i.e. allow it by default)."},"comment":{"url":"https://api.github.com/repos/EFForg/privacybadgerchrome/issues/comments/223420830","html_url":"https://github.com/EFForg/privacybadgerchrome/issues/781#issuecomment-223420830","issue_url":"https://api.github.com/repos/EFForg/privacybadgerchrome/issues/781","id":223420830,"user":{"login":"cooperq","id":64981,"avatar_url":"https://avatars.githubusercontent.com/u/64981?v=3","gravatar_id":"","url":"https://api.github.com/users/cooperq","html_url":"https://github.com/cooperq","followers_url":"https://api.github.com/users/cooperq/followers","following_url":"https://api.github.com/users/cooperq/following{/other_user}","gists_url":"https://api.github.com/users/cooperq/gists{/gist_id}","starred_url":"https://api.github.com/users/cooperq/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cooperq/subscriptions","organizations_url":"https://api.github.com/users/cooperq/orgs","repos_url":"https://api.github.com/users/cooperq/repos","events_url":"https://api.github.com/users/cooperq/events{/privacy}","received_events_url":"https://api.github.com/users/cooperq/received_events","type":"User","site_admin":false},"created_at":"2016-06-02T21:00:19Z","updated_at":"2016-06-02T21:00:19Z","body":"The above solution would trade linear growth of call time for linear growth of memory footprint. I don't think that either of those is a desireable property. Let's keep thinking this through. "}}
{"actor":{"display_login":"cooperq"}}