Web Intents: Opacity

On Tue, Nov 22, 2011 at 2:28 PM, Greg Billock <gbillock@google.com> wrote:
>>> ยง2 Opacity

> Even same-origin requests to see if the service is registered could be
> misused as a (weak) cookie.

Indeed

> Something that may become ergonomically helpful and be an acceptable
> tradeoff is a client ability to request whether any services at all are
> registered for a particular action/type. I'm leery even of that, though.

I'm rather strongly opposed to even that. It took us years to address
a:visited, it's too easy to discover if someone has been somewhere and
abuse that knowledge.

Received on Tuesday, 22 November 2011 22:22:29 UTC