Re: Proposal: "private" execution mode

On 28/11/2013 5:18 PM, Eric Rescorla wrote:
>> Furthermore, this argument cuts both ways. If it isn't practical to 
>> remove fingerprinting surfaces, why are we attempting to do exactly 
>> that for this particular API point with Jan-Ivar's proposal? 
> I believe that's what I said previously. :)
>
> -Ekr

Well, it's hard to argue what that :)

So in conclusion:

 1. I agree with you. We shouldn't try to protect against fingerprinting
    at all.
 2. If we want to protect against fingerprinting, I still advocate
    tackling it in a consistent manner instead of tackling each API
    point on its own.

Gili

Received on Thursday, 28 November 2013 22:23:06 UTC