Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add note about pausing network requests to spec #175

Merged
merged 2 commits into from
Aug 21, 2023
Merged

Add note about pausing network requests to spec #175

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
39314ac
Add note about pausing network requests to spec
cfredric Aug 18, 2023
a319bb8
Update spec.bs
johannhof Aug 21, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion spec.bs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -259,7 +259,9 @@ For providing access to cross-site cookies, this specification aims to ensure co

Developers may submit changes to their sets to add or remove sites. Since membership in a set could provide access to cross-site cookies via automatic grants of the [[STORAGE-ACCESS]], we need to pay attention to these transitions so that they don’t link user identities across all the FPSs they’ve historically been in. In particular, we must ensure that a domain cannot transfer a user identifier from one First-Party Set to another when it changes its set membership. While a set member may not always request and be granted access to cross-site cookies, for the sake of simplicity of handling set transitions, we propose to treat such access as always granted.

For this reason, this specification requires user agents to clear any site data and storage-access permissions of a given site when a site is removed from a set.
For this reason, this specification requires user agents to clear any site data and storage-access permissions of a given site when a site is removed from a set, before starting any fetches that rely on those permissions or site data.

Note: most fetches do not depend on data that needs to be cleared, so browsers should try to optimize for request latency.
johannhof marked this conversation as resolved.
Show resolved Hide resolved

<h2 id="security-considerations">Security Considerations</h2>

Expand Down