Re: [whatwg/fetch] Proposal: `Sec-Site` should capture information about the requester of a resource (#700)

After talking with @arturjanc and a few other folks at Google, I've tried to condense this discussion down into a short explainer that punts on the origin question (we'll do some research on the side and come back to it), and adds @dveditz's `initiator`/`destination` suggestion, as well as other random bits and pieces that Google's security team could use to address various forms of cross-site leakage. I'd appreciate feedback on https://github.com/mikewest/sec-metadata.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/700#issuecomment-389059689