Re: [w3ctag/design-reviews] Markup based Client Hints delegation for third-party content (Issue #702)

After feedback from Cloudinary (https://github.com/WICG/client-hints-infrastructure/issues/108) we're considering a few options for how to improve the HTML accept-ch delegation. Specifically, the current syntax does not conform to either the `Permissions-Policy: ...` HTML format nor the `<iframe allow="..."/>` format. We are considering the following options:

1. Keep current format
  - `<meta name="accept-ch" content="sec-ch-dpr=(https://foo.bar/), sec-ch-width=([https://foo.bar/)">`](https://foo.bar/)%22%3E%60)
2. Support quotes (and and original format)
  - `<meta name="accept-ch" content="sec-ch-dpr=("https://foo.bar/"), sec-ch-width=("[https://foo.bar/")">`](https://foo.bar/%22)%22%3E%60)
3. Support allow like format
  - `<meta name="accept-ch" content="sec-ch-dpr https://foo.bar/; sec-ch-width [https://foo.bar/">`](https://foo.bar/%22%3E%60)
4. Require http-equiv accept-ch and add delegate-ch
  - `<meta http-equiv="accept-ch" content="sec-ch-dpr, sec-ch-width">`
  - `<meta name="delegate-ch" content="ch-dpr https://foo.bar/; ch-width [https://foo.bar/">`](https://foo.bar/%22%3E%60)

Options 1 and 4 are preferred given the we are doing double duty (both requesting and delegating client hints). Mimicking the Permissions-Policy (option 2) or iframe allow (option 3) formats might obscure the distinct meaning of this code.

I can start a new thread if needed, but this seemed a good place to start.

@ylafon @eeeps @yoavweiss @domenic 

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/702#issuecomment-1142117247
You are receiving this because you are subscribed to this thread.

Message ID: <w3ctag/design-reviews/issues/702/1142117247@github.com>

Received on Tuesday, 31 May 2022 13:11:23 UTC