[manifest] Privacy Review: cross origin persistent state (#400)

See https://lists.w3.org/Archives/Public/public-privacy/2015JanMar/0117.html

I don't think this is a serious problem because I would be surprised if implementations actually cache the assets using the same kind of cache used for the HTTP cache. However, it is worth mentioning that to prevent cross origin fingerprinting, they shouldn't do that.

---
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/issues/400