Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Consider interaction with Storage partitioning #1

Open
bvandersloot-mozilla opened this issue Dec 1, 2023 · 2 comments
Open

Consider interaction with Storage partitioning #1

bvandersloot-mozilla opened this issue Dec 1, 2023 · 2 comments

Comments

@bvandersloot-mozilla
Copy link

How does this interact with storage departitioning that Ari has proposed as well?

I'm optimistic that if this conveys those semantics as well, we can resolve all of the outstanding issues tied to storage-partitioning/issues/32

@cfredric
Copy link
Collaborator

I think the right answer might be "it doesn't".

The request header in this proposal only addresses the "are unpartitioned cookies accessible" or "could unpartitioned cookies trivially become accessible" use case, for cross-site requests. That use case boils down to asking whether the context has the storage-access permission already, and if so, has it been "activated" yet.

Whether or not an iframe has gotten a handle (and if so, which storage backends did it request access to?) via the proposal in https://github.com/arichiv/saa-non-cookie-storage is a different question from whether the iframe has the storage-access permission in the first place.

I'd rather not make the Sec-Fetch-Storage-Access header responsible for conveying info about the context's partitioning in general, since that's a much larger question with less clear requirements.

@johannhof
Copy link
Member

Yeah, there are two parts to this, I think

  1. I agree this can't interact with non-cookie storage in any significant way, at least I don't see how :)
  2. We should probably clarify the relationship of this proposal to Expose partitionedness storage-partitioning#32 in the README.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants
@johannhof @cfredric @bvandersloot-mozilla and others