Firefox to auto-block third-party ad cookies by summer
Online advertising exec calls move 'nuclear first strike' against industry
Computerworld - Mozilla will automatically block third-party cookies starting with Firefox 22, which is slated to ship this summer, according to the Stanford University researcher who coded the change.
The move, which will make it more difficult for online ad networks to track users' activities, was only the latest skirmish in a war between advertisers and some browser makers.
Mayer kick-started the change last December when he submitted code to the Bugzilla bug-tracking database operated by Mozilla. It was Mayer's first contribution to the open-source Firefox.
Mozilla has added the cookie change to Firefox's "Nightly" channel, the browser's roughest-edged version. Unless the modification is sidetracked or Mozilla changes its mind, the new policy will first appear in a final release of Firefox on June 25.
Cookies are used by online advertisers to track users' Web movements, then deliver targeted ads. The new Firefox policy will allow cookies presented from domains users actually visit -- dubbed a "first-party" site -- but will block those generated by a third-party domain unless the user had previously visited the cookie's site-of-origin.
Examples of first-party cookies are those placed in a user's browser by sites like Amazon.com to identify the customer on repeat visits, letting him or her skip the log-on sequence. Third-party cookies, however, are often placed in ads on first-party sites so that advertisers and online ad networks can track a browser's past activity.
When the new policy goes into effect, Firefox users will need to clear all cookies to start with a fresh slate. Doing so, however, requires a user to laboriously reenter usernames and passwords to again access websites.
Although Mozilla has not publicized the change, developers and company executives, including Brendan Eich, Mozilla's CTO, and Asa Dotzler, the Firefox desktop product manager, debated the new policy on a discussion thread for several weeks before approving the change.
"I'm in favor of moving forward on this, cautiously," Dotzler said Feb. 11 on the thread. "As long as we have confidence at each step of the way that we're not breaking significant numbers of users or sites, this is a good move."
Mozilla will be following in the footsteps of Apple's Safari, which also blocks third-party cookies by default. "The new Firefox policy is a slightly relaxed version of the Safari policy," said Mayer in an FAQ published on his personal blog.
Even so, at least one online ad official slammed Mozilla for making the change. "Firefox to block 3rd party cookies? This default setting would be a nuclear first strike against ad industry," said Mike Zaneis, general counsel for the Interactive Advertising Bureau (IAB), on Twitter Saturday. The IAB is one of several advertising organizations that has been fighting other privacy moves by browser makers, including Microsoft's decision to set "Do Not Track" on by default in Internet Explorer 10 (IE10).
"Second strike, technically (Safari)," retorted Justin Brookman, director of consumer privacy at the Center for Democracy and Technology, also on Twitter.
All browsers, including Firefox, have settings that let users manually switch off all cookies, or refuse those from third-party sites. But only Safari currently blocks all third-party cookies by default. Safari's small share -- in January, Net Applications pegged it as just 5.2% -- was likely too low to trigger the online ad industry's concern. Firefox is a different beast: According to Net Applications, Firefox was the second-most-used browser last month, with a 19.9% share globally.
But Mozilla didn't view the change as a first strike of any kind, nuclear or otherwise, aimed at online advertising. "We are not trying to stop tracking with this feature," Mozilla's Dotzler said on the discussion thread Sunday. "We are trying to make tracking relationships more obvious to the user."
It would not in Mozilla's self-interest to disrupt the online ad industry, as it generates the bulk of its revenue from a deal with Google, which pays the browser maker a reported $300 million a year for setting Google's search engine as Firefox's default.
The Nightly build of Firefox for Windows, OS X and Linux can be downloaded from Mozilla's website.
Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter at @gkeizer, or subscribe to Gregg's RSS feed . His e-mail address is firstname.lastname@example.org.
- Google reverses field, promises to restore Chrome's scrollbar arrows
- Update: Google ships Chrome 33, patches 28 bugs
- Mozilla's top exec defends in-Firefox ads, revenue search
- Mozilla taps in-Firefox ads as it searches for more revenue
- Mozilla ships Metro Firefox beta for Windows 8
- Mozilla defers Firefox's new 'Australis' UI to April
- Mozilla resets Metro Firefox ship date to mid-March
- Mozilla ships Firefox 26 with opening click-to-play move
- Mozilla banked $274M in '12 from Google-Firefox search deal
- Google trumpets Chrome's SPDY gains
Read more about Internet in Computerworld's Internet Topic Center.
- Best iPhone, iPad Business Apps for 2014
- 14 Tech Conventions You Should Attend in 2014
- 10 Desktop Apps to Power Your Windows PC
- How to Add New Job Skills Without Going Back to School
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- IDC Report: The Future of eMail is Social This paper discusses the changing nature of collaboration and work fueled by the social Web by examining current email trends and the emergence...
- The Business of Social Business Social business represents a significant transformational opportunity for organizations. Read this whitepaper to learn more.
- Six Ways Your Small Business Can Save with Internet Phone Service Traditional phone systems present two main problems for businesses: limited features and high costs. As a result, small businesses are migrating to Internet...
- Cybersecurity Imperatives Reinvent Your Network Security With Palo Alto Networks The Rise of CyberSecurity
- Supercharge Your Web and Mobile App Development with High-Productivity Hybrid Cloud Webinar: Hear from industry experts about the amazing power at the intersection of next-generation web and mobile application development and cloud platforms.
- Webinar: Building a Big Data solution that's production-ready Big data solutions are no longer just a nice-to-have. All Internet White Papers | Webcasts