Update spec for cookie partition keys and partitioned storage keys

privacycg / nav-tracking-mitigations

Navigation-based Tracking Mitigations

https://privacycg.github.io/nav-tracking-mitigations/

35 stars 16 forks source link

Update spec for cookie partition keys and partitioned storage keys #78

Closed svendlarsen closed 4 months ago

svendlarsen commented 4 months ago

Namely, when deleting cookies for a host:

Preserve cookies for that host partitioned under other sites, but
delete cookies partitioned under sites with that host.

And change non-cookie storage deletion:

from looking at the storage key's origin
to looking at the storage key's top-level site.

Fixes #75.

Preview | Diff

wanderview commented 4 months ago

I think this PR also needs to specify the deletion of partitioned non-cookie storage. If non-cookie storage partitioning is not specified adequately yet we should at least add a note indicating that is the intent.

svendlarsen commented 4 months ago

It seems like we've reached agreement on this change, at least given the current state of related spec/standard changes. I'm going to merge; please note any new concerns by filing an issue. Thanks all for your input!

wanderview commented 4 months ago

I think you need to drop the phantom link to the top-level site for the partition key. Getting this failure on trying to submit: