search

WICG / turtledove

TURTLEDOVE
https://wicg.github.io/turtledove/
Other
533 stars 236 forks source link

Having biddingLogicURL on a different origin than owner #934

Closed captify-mgruau closed 11 months ago

captify-mgruau commented 11 months ago

Within the main FLEDGE explainer doc, we can read:

All fields that specify URLs for loading scripts or JSON (biddingLogicURL, biddingWasmHelperURL, trustedBiddingSignalsURL, and updateURL) must be same-origin with owner and must point to URLs whose responses include the HTTP response header Ad-Auction-Allowed: true to ensure they are allowed to be used for loading Protected Audience resources.

I would like to understand why this constraint was set in place. For us at Captify (and likely for others in the AdTech field), it could be interesting to have an AdTech company manage the creation and population of interest groups, while relying on DSPs to manage the bidding logic update. This would avoid us having to manage our bidding in 2 different places (on a DSP and within our own origin).

rdgordon-index commented 11 months ago

cf. https://github.com/WICG/turtledove/issues/813 as well

captify-mgruau commented 11 months ago

thanks - seems to be duplicate of the other, I'll close this one and will monitor #813 .

captify-mgruau commented 11 months ago

Duplicate of #813