Skip to content

RFC: Simplifying or removing the user agent string (strSubVersion) #21492

Closed
@practicalswift

Description

As noted by laanwj in PR 19242 simplifying the user agent would bring some potential privacy benefits:

For what it's worth in web browsers there's currently a trend toward simplifying user agents, creating less variants instead of more. Mostly for privacy reasons. Is signalling this extra information in the user agent useful for the user of the node, or is it simply for statistics for the developers?

MarcoFalke notes some potential security benefits in a comment in the same PR:

Sometimes remote attacks can only be exploited in a specific environment, putting that specific environment into the ua and sending it to the attacker seems counter productive.

And luke-jr in the same PR:

You could argue for removing the UA entirely. But so long as it's there, there's no reason to stop other people from using it as intended. (Nobody is forcing anyone to use this if they don't want to.)

Should we simplify or remove the user agent string (strSubVersion)? Why? Why not?

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions