Can we have an "no floc" option

emo · August 4, 2021, 5:44pm

Since Google wants to change the attempt to track us with Floc, I would like to have the possibility to stop this for the Yunohost server with a simple button.
in Nginx this is:

server {
location / {
add_header Permissions-Policy interest-cohort=();
…
}
}
thx, for doing yunohost, so good to have this.

ericg · August 4, 2021, 6:41pm

I do believe that Yunohost already has a no FLoc setup in NGINX :

github.com

YunoHost/yunohost/blob/d49ad748a27b6338940819ac970f370fc81d5d01/data/templates/nginx/security.conf.inc#L37

    
      
          # https://observatory.mozilla.org/
          more_set_headers "Content-Security-Policy : upgrade-insecure-requests";
          more_set_headers "Content-Security-Policy-Report-Only : default-src https: data: 'unsafe-inline' 'unsafe-eval'  ";
          more_set_headers "X-Content-Type-Options : nosniff";
          more_set_headers "X-XSS-Protection : 1; mode=block";
          more_set_headers "X-Download-Options : noopen";
          more_set_headers "X-Permitted-Cross-Domain-Policies : none";
          more_set_headers "X-Frame-Options : SAMEORIGIN";
          
          
# Disable the disaster privacy thing that is FLoC
          more_set_headers "Permissions-Policy : interest-cohort=()";
          
          
# Disable gzip to protect against BREACH
          # Read https://trac.nginx.org/nginx/ticket/1720 (text/html cannot be disabled!)
          gzip off;

emo · August 4, 2021, 7:20pm

this is default?
i love yunohost