[webkit-dev] Request for position on the Origin-Isolation header

Ryosuke Niwa rniwa at webkit.org
Thu Aug 20 17:40:59 PDT 2020


On Thu, Aug 20, 2020 at 8:51 AM Domenic Denicola <d at domenic.me> wrote:
> Hello webkit-dev,
> I've been working on a new header called Origin-Isolation, which is a way of allowing origins  to opt-out of using document.domain and cross-origin sharing of WebAssembly.Module, and thus allowing the browser to put them into an origin-keyed agent cluster instead of a site-keyed one. This could in turn allow the browser to make better behind-the-scenes decisions for process isolation, or other resource allocation decisions, since sites no longer have any ways to synchronously communicate cross-origin.

We haven't had a chance to fully review the proposal but we didn't
find anything we'd immediately object to. It seems like a reasonable

I feel like I saw some discussions of also differentiating based on
protocol (treating http://webkit.org and https://webkit.org
differently). Do you know you've already had such a discussion and if
so what the outcome of that discussion was?

- R. Niwa

More information about the webkit-dev mailing list