Source
The multi-layered defenses that harden Chrome against abusive notifications
Chrome Security, in collaboration with Firebase Cloud Messaging and Safe Browsing, describes its multi-layered defense-in-depth approach to combat abusive and deceptive push notifications, which reduced Android notifications by over 7 billion a day in Q1 alone.
Why it matters
Users are shielded from scams and malware distributed via deceptive notifications, reducing unwanted interruptions and device battery drain. Chrome users can also directly control notification settings in Chrome settings to ensure they only receive content they find valuable.
The details
- Chrome automatically revokes notification permissions for sites with whom users haven't recently engaged.
- Disruptive domains are limited to 1,000 messages per minute and receive HTTP 429 responses.
- Chrome added a one tap unsubscribe feature to Android for easier permission removal.
Show entities and relationshipsHide entities and relationships
In this article
Technologies
Companies
Organizations
Key connections
Google owns Firebase Cloud Messaging
Google provides Firebase Cloud Messaging as a cloud push notification platform.
Google owns Safety Hub
Google provides Safety Hub as a built-in feature in Chrome.
Chrome Security is a member of Google
Chrome Security is a specialized team within Google.
Chrome Security is a partner of Firebase Cloud Messaging
Chrome Security collaborated with Firebase Cloud Messaging to reduce notification abuse.
Chrome Security is a partner of Safe Browsing
Chrome Security collaborated with Safe Browsing to implement defense-in-depth protections.
Chrome Security leads Chrome
Chrome Security leads the security multi-layered defense strategy for Chrome.
Show 10 more connectionsShow fewer connections
Chrome uses Safe Browsing
Chrome integrates Safe Browsing for permission revoking and security warnings.
Chrome uses Firebase Cloud Messaging
Chrome works with Firebase Cloud Messaging to enforce rate limits on push notifications.
Chrome uses Safety Hub
Chrome uses Safety Hub to let users review and regrant revoked notification permissions.
Chrome reduced unwanted notification volume on Android devices by over 7 billion per day.
Chrome implements message rate limits for the Push API.
Chrome is built with Service Workers
Chrome analyzes service worker behavioral signals to identify abuse networks.
Chrome is related to Push Notifications
Chrome deploys defense-in-depth protections against push notification abuse.
Firebase Cloud Messaging uses Push API
Firebase Cloud Messaging implements message rate limits for the Push API to combat notification abuse.
Google develops and owns the Android operating system.
Google owns Safe Browsing
Google maintains the Safe Browsing blocklist service.
Get the weekly recap
The stories like this one, picked and explained — once a week, straight to your inbox.