privacycg / storage-access

The Storage Access API
https://privacycg.github.io/storage-access/
199 stars 26 forks source link

Should we expose "denied" storage access permissions? #149

Open johannhof opened 1 year ago

johannhof commented 1 year ago

https://github.com/privacycg/storage-access/pull/138 makes it so that while storage-access permissions are exposed to sites, we don't expose the "denied" state to prevent abuse as described in #60. There might be developer utility in exposing it, but we would have to mitigate the risk by matching the delay patterns being specified in #120.