search

WICG / first-party-sets

https://wicg.github.io/first-party-sets/
292 stars 75 forks source link

Discussion: Can a gTLD be a member of a FPS? #36

Open hpsin opened 3 years ago

hpsin commented 3 years ago

There's some interest in generic TLDs wholly-owned and managed by a corporation. (E.g. .google). If a gTLD was guaranteed (via governance and audit) to contain only sites owned and operated by a single entity, could it be added to a first party set?

This would allow companies with multiple "top level" products to retain eTLD+1 branding without bloating a first party set. So "corp" as a gTLD, so products could be hosted on "Product1.corp" and "Product2.Corp", as well as "login.corp".

chrisn commented 3 years ago

My organization has a registered gTLD, although it has no significant usage at present we would be interested in this possibility for future use.

jeffreytgilbert commented 3 years ago

Is this a real concern? I thought as the gTLD provider, you can set the application rules for the entire subdomain chain as they want.

hpsin commented 3 years ago

@jeffreytgilbert - can you clarify what you mean by application rules? We can own the governance of ".office" but we can't reach into the browsers (eg via FPS) to indicate how the subdomain should be treated. It'd be nice to say that Word and PowerPoint are generically allowed to talk to one another and that it's not invasive tracking of the user to do so. Showing a prompt every time we add a new sub component to our app would kill the basic composition model of the web, which is largely what we are hoping to retain via FPS.