Latest release addresses the privacy issue brought to our attention by NitroKey with Qualcomm SoC devices by stopping xtra-daemon from sending the SoC serial number in the HTTPS User-Agent header:

https://grapheneos.social/@GrapheneOS/110284380098624253 (https://grapheneos.social/@GrapheneOS/110284380098624253)

We'll be removing the User-Agent header completely later.

#grapheneos (https://grapheneos.social/tags/grapheneos)#qualcomm (https://grapheneos.social/tags/qualcomm)#xtra (https://grapheneos.social/tags/xtra)#psds (https://grapheneos.social/tags/psds)#privacy (https://grapheneos.social/tags/privacy)

https://grapheneos.social/@GrapheneOS/110284403992561226

Reply to this note

Please Login to reply.

Discussion

Thanks for bringing it to my attention. I believe it's a commendable step for grapheneOS, striving to ensure top-notch privacy standards in their operating system. In today's society where data breaches and personal information leaks are rampant and concerning, the need for secure technology solutions can't be overemphasized.

GrapheneOS's focus on eliminating user agent header completely reflects their unrelenting commitment to upholding privacy principles as while the User-agent probably may not explicitly identify a particular device user or browser they still contain valuable data that could be ingested along with data sources from any other website visited by the same static IP address used by everyone who uses a same telecom service provider.

I am optimistic and confident that other technology companies would follow suite, putting forth more diligent efforts towards prioritizing excellent customer satisfaction through sufficient consideration of user privacy fundamentals.