Explainer

https://github.com/WICG/cross-origin-storage/blob/main/README.md

The explainer

• Includes the information requested by the Explainer Explainer.
• Follows the Web Platform Design Principles.
• Includes or links to answers to the Security/Privacy Questionnaire.
• Describes user research you did to validate the problem and/or design.

Where and by whom is the work is being done?

• GitHub repo: https://github.com/WICG/cross-origin-storage/
• Primary contacts:
  • Thomas Steiner (@tomayac), Google, Developer Relations Engineer
  • Christian Liebel (@christianliebel ), Thinktecture, Consultant
  • François Beaufort (@beaufortfrancois), Google, Developer Relations Engineer
• Organization/project driving the design: Google
• This work is being funded by: Google
• Incubation and standards groups that have discussed the design:
  • Web Engines Hackfest (Notes, Slides)
• Standards group(s) that you expect to discuss and/or adopt this work when it's ready: WHATWG

Feedback so far

• Multi-stakeholder feedback:
  • Mozilla comments: https://github.com/mozilla/standards-positions/issues/1427
  • WebKit comments: https://github.com/WebKit/standards-positions/issues/703
  • Developer interest is tracked in the Web / Framework developer views notes section of the ChromeStatus entry.
• Major unresolved issues with or opposition to this design:

You should also know that...

Public Hash List

Companion design document for the Public Hash List (PHL), the mechanism this proposal leans on for its main cross-site-disclosure mitigation: https://github.com/WICG/cross-origin-storage/blob/main/public-hash-list/phl-explainer.md

Public Hash List implementation

A prototype implementation of the Public Hash List is available. The actual Public Hash List is created on a weekly basis based on a GitHub Action.

Browser extensions

Browser extensions that implement the API (including Public Hash List gating) exist for all browsers:

• Chrome
• Firefox
• Safari

Developer interest

Developer interest is tracked in the Web / Framework developer views notes section of the ChromeStatus entry.

Awesome Cross-Origin Storage

More demos and resources are tracked on the Awesome Cross-Origin Storage list.

<!-- Content below this is maintained by @w3c-tag-bot -->

---

Track conversations at https://tag-github-bot.w3.org/gh/w3ctag/design-reviews/1254