Lusito / forget-me-not

Make the browser forget website data, except for the data you want to keep.
zlib License
227 stars 25 forks source link

Enhanced Support for First Party Isolation #29

Closed Lusito closed 6 years ago

Lusito commented 6 years ago

10 only fixed the bugs when FPI is enabled.

Since FPI bundles cookies by domain (even thirdparty ones), ideally all cookies should be removed once that domain is left.

This is not trivial tho, since firefox does not use the domain visible in the url-bar, but the base-domain. A base domain would for example be amazon.com for www.amazon.com. This seems easy enough, but it gets complex once you have Top Level Domains of multiple orders. Like www.bbc.co.uk (base-domain: bbc.co.uk) or even some private ones like michelgagne.blogspot.de (base-domain: michelgagne.blogspot.de, since blogspot.de is a considered the public suffix).

Since mozilla doesn't provide an API to get the base-domain from any URL, I'll have to depend on thirdparty javascript libraries, which are slow due to the sheer amount of special cases to consider: https://publicsuffix.org/list/public_suffix_list.dat

So I'll have to find a good approach that doesn't compromise the fast browsing experience.