Feature Request: Language privacy

Won’t fix Issue #301767

Details

Created
Jun 9, 2014
Privacy
This issue is public.
Reports
Reported by 0 people

Sign in to watch or report this issue.

Steps to reproduce

URL:

Repro Steps:

  1. Add more than one language/keyboard layout on Windows 8 or newer and visit a website. Regardless of the InPrivate mode, the Accept-Language header can be used to track users.
  2. Open IE and open F12 network tool and click start capture
  3. Load a webpage
  4. Look at the Request header details on the GET request you will see “Accept-Language”

Repeat the steps above with IE running InPrivate

Expected Results:

The InPrivate mode to not reveal language list to the websites. Currently the Windows settings is all-or-nothing but clearly suggests the list is a concern of privacy. It is not very difficult to end up with a language list (i.e. Accept-Language header) that helps to identify, or even uniquely identifies the visitor.

Actual Results:

Attachments

0 attachments

    Comments and activity

    • Microsoft Edge Team

      Changed Assigned To to “Tony S.”

      Changed Assigned To from “Tony S.” to “Warren S.”

      Changed Assigned To from “Warren S.” to “Swathi G.”

      Changed Status to “Confirmed”

      Changed Assigned To from “Swathi G.” to “IE F.”

      Changed Status from “Confirmed” to “Won’t fix”

      Changed Assigned To to “Bogdan B.”

    You need to sign in to your Microsoft account to add a comment.

    Sign in