Skip to content

Commit

Permalink
Add note about pausing network requests to spec (#175)
Browse files Browse the repository at this point in the history
* Add note about pausing network requests to spec

This PR is a companion to #169.

---------

Co-authored-by: Johann Hofmann <[email protected]>
  • Loading branch information
cfredric and johannhof authored Aug 21, 2023
1 parent 65f08fc commit dfc78e6
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion spec.bs
Original file line number Diff line number Diff line change
Expand Up @@ -259,7 +259,9 @@ For providing access to cross-site cookies, this specification aims to ensure co

Developers may submit changes to their sets to add or remove sites. Since membership in a set could provide access to cross-site cookies via automatic grants of the [[STORAGE-ACCESS]], we need to pay attention to these transitions so that they don’t link user identities across all the FPSs they’ve historically been in. In particular, we must ensure that a domain cannot transfer a user identifier from one First-Party Set to another when it changes its set membership. While a set member may not always request and be granted access to cross-site cookies, for the sake of simplicity of handling set transitions, we propose to treat such access as always granted.

For this reason, this specification requires user agents to clear any site data and storage-access permissions of a given site when a site is removed from a set.
For this reason, this specification requires user agents to clear any site data and storage-access permissions of a given site when a site is removed from a set, before starting any fetches that rely on those permissions or site data.

Note: Most fetches do not depend on data that needs to be cleared, so user agents are advised to optimize for request latency.

<h2 id="security-considerations">Security Considerations</h2>

Expand Down

0 comments on commit dfc78e6

Please sign in to comment.