Re: [whatwg/fetch] Proposal: CORS means TAO by default (Issue #1414) from Noam Rosenthal on 2022-03-17 (public-webapps-github@w3.org from March 2022)

From: Noam Rosenthal <notifications@github.com>
Date: Thu, 17 Mar 2022 04:43:52 -0700
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/issues/1414/1070826304@github.com>

> I agree with @mikewest. When we [discussed this](https://w3c.github.io/web-performance/meetings/2020/2020-10-TPAC/index.html#h.u6tiv4d63i38), we concluded that resource-level timings are fair game, while origin-level timings need to remain TAO-opted, and network-level timings may be something that even TAO shouldn't expose.
> 
> So, I'm supportive of CORS implying resource-level timing exposure.

Which attributes would you considered as "resource-level timing"?

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1414#issuecomment-1070826304
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/issues/1414/1070826304@github.com>

Received on Thursday, 17 March 2022 11:44:03 UTC