Re: [w3c/manifest] Add id member to manifest (#988)

Hi, I went back to our privacy team to make sure we weren't overlooking anything, and we established that the existing protections in place are sufficient enough to make any attack here much too costly, inconsistent, and long to be feasible for any attacker. Plus, there are a variety of other measures user agents can easily take to make this even costlier if they want to (although it doesn't seem necessary). 
Here is a [document](https://docs.google.com/document/d/1-BaZAhM3eSh9CP8h8Q_OEV4gsZ9aJ46fl2ef5XeSmcg/edit?usp=sharing) that was used for our discussion , let me know if you have any questions or if we missed anything @johnwilander 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/manifest/pull/988#issuecomment-905853014

Received on Wednesday, 25 August 2021 20:32:24 UTC