{"id":73453,"date":"2023-10-12T06:00:00","date_gmt":"2023-10-12T13:00:00","guid":{"rendered":"https:\/\/blog.mozilla.org\/?p=73453"},"modified":"2023-10-13T15:05:12","modified_gmt":"2023-10-13T22:05:12","slug":"partnership-ohttp-prio","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/","title":{"rendered":"Built for privacy: Partnering to deploy Oblivious HTTP and Prio in Firefox"},"content":{"rendered":"\n<p>Protecting user privacy is a <a href=\"https:\/\/www.mozilla.org\/en-US\/about\/webvision\/full\/#privacy\">core element<\/a> of Mozilla\u2019s vision for the web and the internet at large. In pursuit of this vision, we\u2019re pleased to announce new partnerships with <a href=\"https:\/\/www.fastly.com\/blog\/firefox-fastly-take-another-step-toward-security-upgrade\">Fastly<\/a> and <a href=\"https:\/\/divviup.org\/blog\/divvi-up-in-firefox\/\">Divvi Up<\/a> to deploy privacy-preserving technology in Firefox.<\/p>\n\n\n\n<p>Mozilla builds a number of tools that help people defend their privacy online, but the need for these tools reflects a world where companies view invasive data collection as necessary for building good products and making money. A zero-sum game between privacy and business interests is not a healthy state of affairs. Therefore, we dedicate considerable effort to developing and advancing new technologies that enable businesses to achieve their goals without compromising peoples\u2019 privacy. This is a focus of our work on <a href=\"https:\/\/wiki.mozilla.org\/Standards\">web standards<\/a>, as well as in how we build Firefox itself.<br><br>Building an excellent browser while maintaining a high standard for privacy sometimes requires this kind of new technology. For example: we put a lot of effort into keeping Firefox fast. This involves extensive automated testing, but also monitoring how it\u2019s performing for real users. Firefox currently <a href=\"https:\/\/dictionary.telemetry.mozilla.org\/apps\/firefox_desktop\/metrics\/perf_page_load\">reports<\/a> generic performance metrics like page-load time, but does not associate those metrics with specific sites, because doing so would reveal peoples\u2019 browsing history. These internet-wide averages are somewhat informative but not particularly actionable. Sites are constantly deploying code changes and occasionally those changes can trigger performance bugs in browsers. If we knew that a specific site got much slower overnight, we could likely isolate the cause and fix it. Unfortunately, we lack that visibility today, which hinders our ability to make Firefox great.<br><br>This is a classic problem in data collection: We want aggregate data, but the naive way to get it involves collecting sensitive information about individual people. The solution is to develop technology that delivers the same insights while keeping information about any individual person verifiably private.<br><br>In recent years, Mozilla has worked with others to advance two such technologies \u2014 <a href=\"https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-ohai-ohttp-10\">Oblivious HTTP<\/a> and the Prio-based <a href=\"https:\/\/datatracker.ietf.org\/doc\/draft-ietf-ppm-dap\/\">Distributed Aggregation Protocol (DAP)<\/a> \u2014 towards being proper internet standards that are practical to deploy in production. Oblivious HTTP works by routing encrypted data through an intermediary to conceal its source, whereas DAP\/Prio splits the data into two shares and sends each share to a different server [1]. Despite their different shapes, both technologies rely on a similar principle: By processing the data jointly across two independent parties, they ensure neither party holds the information required to reveal sensitive information about someone.<br><br>We therefore need to partner with another independent and trustworthy organization to deploy each technology in Firefox. Having worked for some time to develop and validate both technologies in staging environments, we\u2019ve now taken the next step to engage Fastly to operate an OHTTP relay and Divvi Up to operate a DAP aggregator. Both Fastly and <a href=\"https:\/\/www.abetterinternet.org\/\">ISRG<\/a> (the nonprofit behind Divvi Up and Let\u2019s Encrypt) have excellent reputations for acting with integrity, and they have staked those reputations on the faithful operation of these services. So even in a mirror universe where we tried to persuade them to cheat, they have a strong incentive to hold the line.<br><br>Our objective at Mozilla is to develop viable alternatives to the things that are wrong with the internet today and move the entire industry by demonstrating that it\u2019s possible to do better. In the short term, these technologies will help us keep Firefox competitive while adhering to our longstanding principles around sensitive data. Over the long term, we want to see these kinds of strong privacy guarantees become the norm, and we will continue to work towards such a future.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h6 class=\"wp-block-heading\"><em>Footnote:<\/em><\/h6>\n\n\n\n<p><em>[1] Each approach is best-suited to different scenarios, which is why we\u2019re investing in both. Oblivious HTTP is more flexible and can be used in interactive contexts, whereas DAP\/Prio can be used in situations where the payload itself might be identifying.<\/em><br><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Protecting user privacy is a core element of Mozilla\u2019s vision for the web and the internet at large. In pursuit of this vision, we\u2019re pleased to announce new partnerships with Fastly and Divvi Up to deploy privacy-preserving technology in Firefox. Mozilla builds a number of tools that help people defend their privacy online, but the [&hellip;]<\/p>\n","protected":false},"author":1850,"featured_media":73464,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30],"tags":[464211,464204,464209,464210,847],"coauthors":[462265],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Built for privacy: Partnering to deploy Oblivious HTTP and Prio in Firefox<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/\",\"url\":\"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/\",\"name\":\"Built for privacy: Partnering to deploy Oblivious HTTP and Prio in Firefox\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2023\/10\/fx_blog_partnership_secure-private.png\",\"datePublished\":\"2023-10-12T13:00:00+00:00\",\"dateModified\":\"2023-10-13T22:05:12+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/39c72fc5fe3131938ca29bc4d0fc71e5\"},\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/#primaryimage\",\"url\":\"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2023\/10\/fx_blog_partnership_secure-private.png\",\"contentUrl\":\"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2023\/10\/fx_blog_partnership_secure-private.png\",\"width\":1920,\"height\":1080},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Built for privacy: Partnering to deploy Oblivious HTTP and Prio in Firefox\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/en\/\",\"name\":\"The Mozilla Blog\",\"description\":\"News and Updates about Mozilla\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/en\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/39c72fc5fe3131938ca29bc4d0fc71e5\",\"name\":\"Bobby Holley\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/image\/3778421c0b7c4656b76e9453776e3e22\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ac57223c49d41049a4917e187b854377?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ac57223c49d41049a4917e187b854377?s=96&d=mm&r=g\",\"caption\":\"Bobby Holley\"},\"description\":\"CTO, Firefox\",\"url\":\"https:\/\/blog.mozilla.org\/en\/author\/bholleymozilla-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Built for privacy: Partnering to deploy Oblivious HTTP and Prio in Firefox","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/","url":"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/","name":"Built for privacy: Partnering to deploy Oblivious HTTP and Prio in Firefox","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/#primaryimage"},"image":{"@id":"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2023\/10\/fx_blog_partnership_secure-private.png","datePublished":"2023-10-12T13:00:00+00:00","dateModified":"2023-10-13T22:05:12+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/39c72fc5fe3131938ca29bc4d0fc71e5"},"breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/#primaryimage","url":"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2023\/10\/fx_blog_partnership_secure-private.png","contentUrl":"https:\/\/blog.mozilla.org\/wp-content\/blogs.dir\/278\/files\/2023\/10\/fx_blog_partnership_secure-private.png","width":1920,"height":1080},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/en\/firefox\/partnership-ohttp-prio\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/en\/"},{"@type":"ListItem","position":2,"name":"Built for privacy: Partnering to deploy Oblivious HTTP and Prio in Firefox"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/en\/#website","url":"https:\/\/blog.mozilla.org\/en\/","name":"The Mozilla Blog","description":"News and Updates about Mozilla","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/en\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/39c72fc5fe3131938ca29bc4d0fc71e5","name":"Bobby Holley","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/en\/#\/schema\/person\/image\/3778421c0b7c4656b76e9453776e3e22","url":"https:\/\/secure.gravatar.com\/avatar\/ac57223c49d41049a4917e187b854377?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ac57223c49d41049a4917e187b854377?s=96&d=mm&r=g","caption":"Bobby Holley"},"description":"CTO, Firefox","url":"https:\/\/blog.mozilla.org\/en\/author\/bholleymozilla-com\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/posts\/73453"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/users\/1850"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/comments?post=73453"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/posts\/73453\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/media\/73464"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/media?parent=73453"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/categories?post=73453"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/tags?post=73453"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blog.mozilla.org\/en\/wp-json\/wp\/v2\/coauthors?post=73453"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}