privacycg / nav-tracking-mitigations

Navigation-based Tracking Mitigations
https://privacycg.github.io/nav-tracking-mitigations/
35 stars 16 forks source link

Iframe and CHIPS storage access #49

Closed amaliev closed 1 year ago

amaliev commented 1 year ago

The current spec should require no changes for iframe/subresource access - these are already tracked as stateful accesses under the top-level site. If we assume partitioned 3P cookies and 3P storage, all accesses by a 3P subresource may be used as a DIPS workaround (via a client-side redirect) and should be tracked accordingly.

@wanderview


Preview | Diff

wanderview commented 1 year ago

LGTM. @jyasskin are you ok with this caveat in a note or do we need to do something different?