Re: [w3ctag/design-reviews] Cookies Having Independent Partitioned State (CHIPS) specification review (Issue #779)

Hi @torgo, thank you for taking another look! This is the list of substantial changes from the previous proposal:

- The Partitioned attribute no longer requires the `__Host-` prefix or its required attributes. The Secure requirement remains. See https://github.com/privacycg/CHIPS/issues/30
- We are changing the per-partition-per-domain limit to be based on the total size (in bytes) of the cookies set by a domain in a particular partition in addition to the number of cookies. We intend to impose a limit of 10 KB per-embedded-site, per-top-level-site and increase the numeric limit from 10 to 180. See https://github.com/privacycg/CHIPS/issues/48
- For sites embedded in top-level domains that are in a First-Party Set, their cookies' partition key will no longer be the owner domain of that set. Rather, the partition key will always be the top-level domain that the cookie was created on. See https://github.com/privacycg/CHIPS/pull/44




-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/779#issuecomment-1303475061
You are receiving this because you are subscribed to this thread.

Message ID: <w3ctag/design-reviews/issues/779/1303475061@github.com>

Received on Friday, 4 November 2022 12:49:56 UTC