Privacy and untrusted reports
05Even aggregate reports can disclose traffic metadata, and report content is untrusted input.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 7 ↗
RFC 9990 · § 7EXAMPLE
3 / 3
03
Parse defensively
Treat received report data as untrusted, not as authenticated truth.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
Third-party report recipients can perform traffic analysis.
- Third-party report recipients can perform traffic analysis.
- Internal privacy policy may constrain transmission and retention.
- Consumers need safe XML handling, validation, and resource limits for reports.
Examples are illustrative. Read the exact policy, reporting, and privacy rules in the linked current specification.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy