Re: [css-houdini-drafts] [css-paint-api] CSS Paint API leaks browsing history

Yeah, the timing channel revealing when repaints occur is always going to be there; we can't prevent expensive repaints in general.  The "good" attack with Paint API just makes it more reliable, but anything that can cause painting to be computationally expensive will work.

-- 
GitHub Notification of comment by tabatkins
Please view or discuss this issue at https://github.com/w3c/css-houdini-drafts/issues/791#issuecomment-412617964 using your GitHub account

Received on Monday, 13 August 2018 18:28:53 UTC