Add security section, fixed respec issue, changed affiliation

WICG / priority-hints

A browser API to enable developers signal the priorities of the resources they need to download.

https://wicg.github.io/priority-hints/

Other

271 stars 26 forks source link

Add security section, fixed respec issue, changed affiliation #38

Closed yoavweiss closed 5 years ago

yoavweiss commented 5 years ago

This PR addresses mostly the lack of security/privacy considerations section, as pointed out in the TAG review

It addresses Fingerprintability as well as abusive use by ad networks. On top of that, while I was there, I also fixed a couple of admin stuff such as affiliation and things respec was complaining about.

yoavweiss commented 5 years ago

@lknik - can you take a look?

lknik commented 5 years ago

I'll have a look (though no ETA known today).

lknik commented 5 years ago

Hi, looks more or less good. However:

if you think HTTPS/Tor would ship this (i.e. assumption of encrypted traffic all the way, similarly even for HTTPS, perhaps! But Tor is the "strongest" threat model), it's both a server and possibly a passive observer too that can potentially look at the patterns

yoavweiss commented 5 years ago

Merged as this seems like an improvement on previous state. @lknik - let me know if you have any further concerns and I'd be happy to address them in a followup