Skip to content

Commit

Permalink
imperfect indistinguishability
Browse files Browse the repository at this point in the history
and the conditions where it might be OK
  • Loading branch information
martinthomson authored Nov 12, 2023
1 parent a4e6435 commit 2b806c9
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions design-dimensions/Dimensions-with-General-Agreement.md
Original file line number Diff line number Diff line change
Expand Up @@ -49,3 +49,6 @@ Users must be able to opt out of participation in any measurement activitity.

If a user opts out, then it must be possible for their user agent to hide this fact from sites.
For example, in an aggregation service, the user agent might provide a zero value to contribute to the aggregate, but this needs to be indistinguishable from a non-zero value.

In some designs, an opt-out might not be perfectly indistinguishable, but opt out must be indistinguishable from other normal and commonplace conditions.
For example, if opt out in measurement results in returning no information in response to a request, then participating users must also regularly return no information for reasons other than opt out.

0 comments on commit 2b806c9

Please sign in to comment.