“使用……登录·隐私”：Web SSO 登录选项间隐私差异的及时披露
"Sign in with ... Privacy'': Timely Disclosure of Privacy Differences among Web SSO Login Options
AI总结：
针对Web SSO登录选项间隐私差异隐藏且难以比较的问题，通过实证分析将前500网站RP归类为四种代码模式，并开发了SPEye浏览器扩展以提取并展示权限请求信息。
摘要：
自引入Web单点登录（SSO）协议以来，网站上的登录选项数量有所增加。Web SSO服务允许用户授权网站或依赖方（RP）访问其来自身份提供商（IdP）账户的个人资料信息。许多RP网站未能提供足够的隐私相关信息，以供用户做出明智的登录决策。此外，不同登录选项间权限请求的隐私差异在很大程度上对用户是隐藏的，且手动提取和比较非常耗时。本文对支持三种主要IdP登录选项（Facebook、Google和Apple）的流行RP实现进行了实证分析，并将排名前500的网站中的RP归类为四种客户端代码模式。基于这些RP模式，我们设计并实现了SSOPrivateEye（SPEye），这是一个浏览器扩展原型，能够提取并向用户展示涵盖这三种IdP的RP中SSO登录选项的权限请求信息。
英文摘要：
The number of login options on web sites has increased since the introduction of web single sign-on (SSO) protocols. Web SSO services allow users to grant web sites or relying parties (RPs) access to their personal profile information from identity provider (IdP) accounts. Many RP sites fail to provide sufficient privacy-related information to allow users to make informed login decisions. Moreover, privacy differences in permission requests across login options are largely hidden from users and are time-consuming to manually extract and compare. In this paper, we present an empirical analysis of popular RP implementations supporting three major IdP login options (Facebook, Google, and Apple) and categorize RPs in the top 500 sites into four client-side code patterns. Informed by these RP patterns, we design and implement SSOPrivateEye (SPEye), a browser extension prototype that extracts and displays to users permission request information from SSO login options in RPs covering the three IdPs.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
