Closed rubberyuzu closed 1 year ago
hi @rubberyuzu thanks for this. We're picking it up now and discussing in the context of other bfcache-related reviews. One thing that came to my attention: since this is telemetry there should probably be additional scrutiny about the privacy-related aspects of this proposal. You've indicated that there's a privacy & security section but I think we'd like to see more detail here.
From @cynthia : If there's an extension that modifies the website or runs any extra scripts on the website that will trigger a potential leak of some information about the user.
Thanks for the review! I added a more detailed explanation on security and privacy here: explainer
Discussed in this week's breakouts. We've reviewed the updated explainer, and are happy to see this move forward. Thanks for bringing this to our attention.
Please don't forget about the potential risks of extension leakage in the actual implementation, as we believe that is an actual risk.
Braw mornin' TAG!
I'm requesting a TAG review of Back/forward cache NotRestoredReasons API.
Further details:
We'd prefer the TAG provide feedback as : 🐛 open issues in our GitHub repo for each point of feedback