From ec19d5bbf684bd051225a0b735a6577fbcd2bb59 Mon Sep 17 00:00:00 2001 From: benjaminsavage <52456851+benjaminsavage@users.noreply.github.com> Date: Mon, 19 Jun 2023 09:38:46 +0100 Subject: [PATCH 1/2] Consensus on server-side data join At the last face-to-face PAT-CG call, we discussed this design dimension: the location of data join (between source and trigger events). There was consensus that the group was potentially open to data join happening server-side, so long as the system was able to achieve our desired privacy and security goals. --- design-dimensions/Dimensions-with-General-Agreement.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/design-dimensions/Dimensions-with-General-Agreement.md b/design-dimensions/Dimensions-with-General-Agreement.md index 8c84643..e285676 100644 --- a/design-dimensions/Dimensions-with-General-Agreement.md +++ b/design-dimensions/Dimensions-with-General-Agreement.md @@ -14,6 +14,10 @@ This document serves to capture the dimensions with general agreement from the C The community group has reached general agreement that the _Private Measurement Technical Specification MVP_ may include server processing dependencies, however any server architecture must achieve both a high level of security (which the editors will align with the ongoing [Threat Model](../threat-model) work) as well as ability to explain the privacy and security properties of the system to end users. +### Location of Data Join + +The community group has reached general agreement that data join could potentially occur off device within a some type of server side architecture. +This is conditional on having adequate protections for any data that leaves a device, in line with our security and privacy goals. ## Privacy defined at least by Differential Privacy From 30e934f941d7a86ee052547dfcc199078fcd9e1f Mon Sep 17 00:00:00 2001 From: benjaminsavage <52456851+benjaminsavage@users.noreply.github.com> Date: Mon, 10 Jul 2023 07:40:49 +0000 Subject: [PATCH 2/2] Adding preface about what data-join refers to. --- design-dimensions/Dimensions-with-General-Agreement.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/design-dimensions/Dimensions-with-General-Agreement.md b/design-dimensions/Dimensions-with-General-Agreement.md index e285676..f542089 100644 --- a/design-dimensions/Dimensions-with-General-Agreement.md +++ b/design-dimensions/Dimensions-with-General-Agreement.md @@ -16,7 +16,7 @@ The community group has reached general agreement that the _Private Measurement ### Location of Data Join -The community group has reached general agreement that data join could potentially occur off device within a some type of server side architecture. +Attribution requires joining data from the site of an impression (source) and the site of a conversion (trigger). The community group has reached general agreement that data join could potentially occur off device within a some type of server side architecture. This is conditional on having adequate protections for any data that leaves a device, in line with our security and privacy goals. ## Privacy defined at least by Differential Privacy