[Webkit-unassigned] [Bug 204744] New: Consider implementing Fetch Metadata.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=204744

            Bug ID: 204744
           Summary: Consider implementing Fetch Metadata.
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mkwst at chromium.org
                CC: wilander at apple.com

Fetch Metadata defines a set of HTTP request headers which aim to give servers more information about incoming requests in order to make better decisions about whether or not to service them. This will hopefully have a positive effect on developers' ability to deal with some xsleaks-style timing attacks. https://w3c.github.io/webappsec-fetch-metadata/#intro outlines some use cases.

Chrome shipped this mechainsm in 76, and aims to ship `Sec-Fetch-Dest` in 80.

Mozilla has been participating actively in the design, and seems generally on board: https://github.com/mozilla/standards-positions/issues/88 (though there's not much movement on https://bugzilla.mozilla.org/show_bug.cgi?id=1508292).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20191202/f1fb0265/attachment.htm>