{"id":2420,"date":"2019-01-28T10:36:05","date_gmt":"2019-01-28T18:36:05","guid":{"rendered":"https:\/\/blog.mozilla.org\/security\/?p=2420"},"modified":"2019-01-28T18:38:20","modified_gmt":"2019-01-29T02:38:20","slug":"defining-the-tracking-practices-that-will-be-blocked-in-firefox","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/security\/2019\/01\/28\/defining-the-tracking-practices-that-will-be-blocked-in-firefox\/","title":{"rendered":"Defining the tracking practices that will be blocked in Firefox"},"content":{"rendered":"<p>For years, web users have endured major privacy violations. Their browsing continues to be routinely and silently tracked across the web. Tracking techniques have advanced to the point where users cannot meaningfully control how their personal data is used.<\/p>\n<p>At Mozilla, we believe that privacy is fundamental, and that pervasive online tracking is unacceptable. Simply put: <a href=\"https:\/\/blog.mozilla.org\/security\/2018\/09\/05\/why-we-need-better-tracking-protection\/\">users need more protection from tracking.<\/a> In late 2018, Mozilla announced that we are <a href=\"https:\/\/blog.mozilla.org\/futurereleases\/2018\/08\/30\/changing-our-approach-to-anti-tracking\/\">changing our approach to anti-tracking<\/a>, with a focus on providing tracking protection by default, for the benefit of everyone using Firefox.<\/p>\n<p>In support of this effort, today we are releasing an <a href=\"https:\/\/wiki.mozilla.org\/Security\/Anti_tracking_policy\">anti-tracking policy<\/a> that outlines the tracking practices that Firefox will block by default. At a high level, this new policy will curtail tracking techniques that are used to build profiles of users\u2019 browsing activity. In the policy, we outline the types of tracking practices that users cannot meaningfully control. Firefox may apply technical restrictions to the parties found using each of these techniques.<\/p>\n<p>With the release of our new policy, we\u2019ve defined the set of tracking practices that we think users need to be protected against. As a first step in enforcing this policy, Firefox<a href=\"https:\/\/blog.mozilla.org\/security\/2018\/10\/23\/firefox-63-lets-users-block-tracking-cookies\/\"> includes a feature<\/a> that prevents domains classified as trackers from using cookies and other browser storage features (e.g., DOM storage) when loaded as third parties. While this feature is currently off by default, we are working towards turning it on for all of our users in a future release of Firefox.<\/p>\n<p>Furthermore, the policy also covers query string tracking, browser fingerprinting, and supercookies. We intend to apply protections that block these tracking practices in Firefox in the future.<\/p>\n<p><b>Parties not wishing to be blocked by this policy should stop tracking Firefox users across websites<\/b>. To classify trackers, we rely on Disconnect\u2019s <a href=\"https:\/\/github.com\/disconnectme\/disconnect-tracking-protection\">Tracking Protection list<\/a>, which is curated in alignment with this policy. If a party changes their tracking practices and updates their public documentation to reflect these changes, they should <a href=\"https:\/\/disconnect.me\/trackerprotection\/#feedback\">work with Disconnect<\/a> to update the classification of their domains.<\/p>\n<p>This initial release of the <a href=\"https:\/\/wiki.mozilla.org\/Security\/Anti_tracking_policy\">anti-tracking policy<\/a> is not meant to be the final version. Instead, the policy is a living document that we will update in response to the discovery and use of new tracking techniques. We believe that all web browsers have a fundamental obligation to protect users from tracking and we hope the launch of our policy advances the conversation about what privacy protections should be the default for all web users.<\/p>\n<p><em>Clarification (2019-01-28): Added a sentence to clarify the current status of the cookie blocking feature.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>For years, web users have endured major privacy violations. Their browsing continues to be routinely and silently tracked across the web. Tracking techniques have advanced to the point where users &hellip; <a class=\"go\" href=\"https:\/\/blog.mozilla.org\/security\/2019\/01\/28\/defining-the-tracking-practices-that-will-be-blocked-in-firefox\/\">Read more<\/a><\/p>\n","protected":false},"author":1597,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[47,30,847],"tags":[],"coauthors":[320791,311653],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Defining the tracking practices that will be blocked in Firefox - Mozilla Security Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/security\/2019\/01\/28\/defining-the-tracking-practices-that-will-be-blocked-in-firefox\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Steven Englehardt, Marshall Erwin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/2019\/01\/28\/defining-the-tracking-practices-that-will-be-blocked-in-firefox\/\",\"url\":\"https:\/\/blog.mozilla.org\/security\/2019\/01\/28\/defining-the-tracking-practices-that-will-be-blocked-in-firefox\/\",\"name\":\"Defining the tracking practices that will be blocked in Firefox - Mozilla Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/#website\"},\"datePublished\":\"2019-01-28T18:36:05+00:00\",\"dateModified\":\"2019-01-29T02:38:20+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/4e57438e5a1cb316da982a0053c6ed53\"},\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/2019\/01\/28\/defining-the-tracking-practices-that-will-be-blocked-in-firefox\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/security\/2019\/01\/28\/defining-the-tracking-practices-that-will-be-blocked-in-firefox\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/2019\/01\/28\/defining-the-tracking-practices-that-will-be-blocked-in-firefox\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/security\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Defining the tracking practices that will be blocked in Firefox\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/security\/\",\"name\":\"Mozilla Security Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/security\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/4e57438e5a1cb316da982a0053c6ed53\",\"name\":\"Steven Englehardt\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/image\/921e0113c6856efe3f1960058729d00f\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4013c3a1151063bb911608e4c8dc6f23?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4013c3a1151063bb911608e4c8dc6f23?s=96&d=identicon&r=g\",\"caption\":\"Steven Englehardt\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Defining the tracking practices that will be blocked in Firefox - Mozilla Security Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/security\/2019\/01\/28\/defining-the-tracking-practices-that-will-be-blocked-in-firefox\/","twitter_misc":{"Written by":"Steven Englehardt, Marshall Erwin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/security\/2019\/01\/28\/defining-the-tracking-practices-that-will-be-blocked-in-firefox\/","url":"https:\/\/blog.mozilla.org\/security\/2019\/01\/28\/defining-the-tracking-practices-that-will-be-blocked-in-firefox\/","name":"Defining the tracking practices that will be blocked in Firefox - Mozilla Security Blog","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/security\/#website"},"datePublished":"2019-01-28T18:36:05+00:00","dateModified":"2019-01-29T02:38:20+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/4e57438e5a1cb316da982a0053c6ed53"},"breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/security\/2019\/01\/28\/defining-the-tracking-practices-that-will-be-blocked-in-firefox\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/security\/2019\/01\/28\/defining-the-tracking-practices-that-will-be-blocked-in-firefox\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/security\/2019\/01\/28\/defining-the-tracking-practices-that-will-be-blocked-in-firefox\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/security\/"},{"@type":"ListItem","position":2,"name":"Defining the tracking practices that will be blocked in Firefox"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/security\/#website","url":"https:\/\/blog.mozilla.org\/security\/","name":"Mozilla Security Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/security\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/4e57438e5a1cb316da982a0053c6ed53","name":"Steven Englehardt","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/image\/921e0113c6856efe3f1960058729d00f","url":"https:\/\/secure.gravatar.com\/avatar\/4013c3a1151063bb911608e4c8dc6f23?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4013c3a1151063bb911608e4c8dc6f23?s=96&d=identicon&r=g","caption":"Steven Englehardt"}}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts\/2420"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/users\/1597"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/comments?post=2420"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts\/2420\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/media?parent=2420"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/categories?post=2420"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/tags?post=2420"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/coauthors?post=2420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}