Re: [whatwg/fetch] Proposal: CORS means TAO by default (Issue #1414) from Yoav Weiss on 2022-03-17 (public-webapps-github@w3.org from March 2022)

From: Yoav Weiss <notifications@github.com>
Date: Thu, 17 Mar 2022 03:15:27 -0700
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/issues/1414/1070752124@github.com>

I agree with @mikewest. When we [discussed this](https://w3c.github.io/web-performance/meetings/2020/2020-10-TPAC/index.html#h.u6tiv4d63i38), we concluded that resource-level timings are fair game, while origin-level timings need to remain TAO-opted, and network-level timings may be something that even TAO shouldn't expose.

So, I'm supportive of CORS implying resource-level timing exposure.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1414#issuecomment-1070752124
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/issues/1414/1070752124@github.com>

Received on Thursday, 17 March 2022 10:15:39 UTC