From d86f47dc53c1ddfa58a6c8b50e66bcf5f06a93fc Mon Sep 17 00:00:00 2001
From: Libor Polčák <ipolcak@fit.vutbr.cz>
Date: May 04 2023 12:48:56 +0000
Subject: Add SECRYPT NEL paper to bibliography


---

diff --git a/biblio.bib b/biblio.bib
index 9095f3a..2f45503 100644
--- a/biblio.bib
+++ b/biblio.bib
@@ -17,6 +17,15 @@
   year = {2010},
 }
 
+@inproceedings{nelsecrypt23,
+  author = {Polčák, Libor and Jeřábek, Kamil},
+  title = {Data Protection and Security Issues With Network Error Logging},
+  booktitle = "Proceedings of the 20th International Conference on Security and Cryptography",
+  year = 2023,
+  location = "Rome, IT",
+  publisher = "SciTePress - Science and Technology Publications",
+}
+
 @ARTICLE{Kohno,
   author={Kohno, Tadayoshi and Broido, Andre and Claffy, Kimberly C.},
   journal={IEEE Transactions on Dependable and Secure Computing},
diff --git a/main.tex b/main.tex
index ba2c33f..7eea76a 100644
--- a/main.tex
+++ b/main.tex
@@ -290,7 +290,8 @@ support video calls, audio and video editing, maps and navigation,
 augmented and virtual reality. One can control games with gamepads or check the
 battery status. The web page may change its appearance according to the ambient
 light. Nevertheless, most web pages do not need these advanced
-APIs~\cite{webapi-vibrate}. Some APIs like Geolocation or microphone and
+APIs~\cite{webapi-vibrate}. Service Worker API allows Man-in-the-Middle
+adversaries inject long-lasting trackers~\cite{nelsecrypt23}. Some APIs like Geolocation or microphone and
 camera access need explicit approval by users. Others like gamepads, virtual reality,
 battery, or sensors are available for
 all visited pages\footnote{Sensor APIs are currently implemented, or partially implemented, in