From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marius Bakke Subject: Re: Firefox 52's end of life, packaging Chromium Date: Sun, 02 Sep 2018 15:29:18 +0200 Message-ID: <87pnxwjadt.fsf@fastmail.com> References: <87ftyx35pw.fsf@lassieur.org> <87pny09rgo.fsf@elephly.net> <875zzozcnf.fsf@netris.org> <871sacz9si.fsf@netris.org> <87va7oyzbd.fsf@elephly.net> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:34911) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fwT1r-0001ue-PQ for guix-devel@gnu.org; Sun, 02 Sep 2018 10:07:14 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fwSff-0007IZ-P1 for guix-devel@gnu.org; Sun, 02 Sep 2018 09:44:18 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:51165) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1fwSed-0006no-L6 for guix-devel@gnu.org; Sun, 02 Sep 2018 09:44:07 -0400 In-Reply-To: <87va7oyzbd.fsf@elephly.net> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ricardo Wurmus , Mark H Weaver Cc: guix-devel@gnu.org, =?utf-8?Q?Cl=C3=A9ment?= Lassieur --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Ricardo Wurmus writes: > Hi Mark, > >> Mark H Weaver writes: >> >>> Ricardo Wurmus writes: >>> >>>> The TODO list for convenience: >>>> >>>> * There is still some data transmitted when starting the browser for t= he >>>> first time. It seems related to the "domain_reliability" component. >>>> * Remove remaining "Web Store" links. Currently I've only found it in >>>> settings, under "accessibility" and "fonts". >>>> * Opening settings transmits a bunch of data, the next version will >>>> include the 'disable-translation-lang-fetch' patch from Inox. >>>> * PDFium is built, but does not seem to work (the 'install' phase >>>> probably needs tweaking). Might just disable it instead. >>>> >>>> It would be *very* nice if the first and third items could be solved >>>> before merging, but I don=E2=80=99t consider them blockers. >>> >>> The GNU FSDG says "The distro must contain no DRM, no back doors, and no >>> spyware." Since GNU Guix has committed to follow the FSDG, that means >>> that we must not include programs that include spyware. We have >>> committed ourselves to "removing such programs if any are discovered." >>> >>> Guix _is_ committed to the GNU FSDG, right? > > Of course it is. > >>> Do you agree that #1 and #3 look like spyware? If so, wouldn't that >>> make them blockers? > > #3 looks like it=E2=80=99s fetching translation information, which seems > legitimate. #1 is unclear to me, honestly, as it seems to be a bug. > AIUI the =E2=80=9Cdomain_reliability=E2=80=9D component is not enabled by= default. > > For context I read a little about this =E2=80=9Cdomain_reliability=E2=80= =9D thing and > found this Google document (I don=E2=80=99t know if this is an official > publication by the Chromium developers): > > https://docs.google.com/document/d/14U0YA4dlzNYciq2ke0StEMjomdBUN6ocSt1= kN03HJ0s/pub#h.20j0auqi631o > > From what I understand, the =E2=80=9CDomain Reliability Monitoring=E2=80= =9D feature in > Chromium is sending connection successes / failures for resources on a > participating domain to a collection point determined by the operators > of that domain, i.e. not necessarily to Google. Woah, good find! Apparently this is being submitted as a W3C standard: . I'll try to find a toggle. If this package gets into Guix, I think we should add system tests (or similar) to catch regressions in the unsolicited network traffic area. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAluL5a4ACgkQoqBt8qM6 VPp8sggAunerjxiePYJWI7go1jpYTgeaQqCLkLDxHk3ahdFsahYH/Yrik7OJgG4i MHSeY6pWmDxatr0FI1lB8A0g1Vfzeshw6HAwf8aWFQtCe2Q+Op4WeDpgeRiVZI5L l48xK2fmpbX16emK8MoM9U7D9gzRZdN5BIMlioJV8f/pK9wEr4APCBdhboYNi199 zQ6vcmdK9o3j4WlgXsoM32wd+ZNHBsdqLKuShpZY79IxyfdSzG1N5teNuCMTYV5W WlUUo5W1axuxxujCqKfRuF0Ld4RKH8pRWUZCq59IZAyqdGpHdix+3FHwo6th+2Gn VwVmaVTCPYDpmwMZ3R+Jd50vWKVn8w== =yJ96 -----END PGP SIGNATURE----- --=-=-=--