[w3ctag/design-reviews] Incubation: Cross-Origin Storage (Issue #1254)

tomayac created an issue (w3ctag/design-reviews#1254)

### Explainer

https://github.com/WICG/cross-origin-storage/blob/main/README.md

### The explainer

- [x] Includes the information requested by the [Explainer Explainer](https://w3ctag.github.io/explainer-explainer/#introduction).
- [x] Follows the [Web Platform Design Principles](https://www.w3.org/TR/design-principles/).
- [x] Includes or links to answers to the [Security/Privacy Questionnaire](https://www.w3.org/TR/security-privacy-questionnaire/).
- [x] Describes user research you did to validate the problem and/or design.

### Where and by whom is the work is being done?

- GitHub repo: https://github.com/WICG/cross-origin-storage/
- Primary contacts:
  - Thomas Steiner (@tomayac), Google, Developer Relations Engineer
  - Christian Liebel (@christianliebel ), Thinktecture, Consultant
  - François Beaufort (@beaufortfrancois), Google, Developer Relations Engineer
- Organization/project driving the design: Google
- This work is being funded by: Google
- Incubation and standards groups that have discussed the design:
  - Web Engines Hackfest ([Notes](https://hackmd.io/FEHrk-JETySTQyl8ooCRZw), [Slides](https://docs.google.com/presentation/d/1wGjZ1nWBfb9hJrB49Cg822VOaMxqIe2nsA_Rc94ZktQ/preview))
- Standards group(s) that you expect to discuss and/or adopt this work when it's
  ready: WHATWG


### Feedback so far

- Multi-stakeholder feedback:
  - Mozilla comments: https://github.com/mozilla/standards-positions/issues/1427
  - WebKit comments: https://github.com/WebKit/standards-positions/issues/703
  - Developer interest is tracked in the [Web / Framework developer views notes](https://chromestatus.com/feature/5163371507875840#:~:text=Web%20/%20Framework%20developer%20views%20notes) section of the ChromeStatus entry.
- Major unresolved issues with or opposition to this design:


### You should also know that...

#### Public Hash List

Companion design document for the Public Hash List (PHL), the mechanism this proposal leans on
for its main cross-site-disclosure mitigation:
https://github.com/WICG/cross-origin-storage/blob/main/public-hash-list/phl-explainer.md

#### Public Hash List implementation

A [prototype implementation of the Public Hash List](https://github.com/WICG/cross-origin-storage/tree/main/public-hash-list/implementation) is available. The [actual Public Hash List](https://media.githubusercontent.com/media/WICG/cross-origin-storage/refs/heads/main/public-hash-list/implementation/data/public-hash-list.dat) is created on a weekly basis based on a [GitHub Action](https://github.com/WICG/cross-origin-storage/blob/main/.github/workflows/public-hash-list.yml).

#### Browser extensions

Browser extensions that implement the API (including Public Hash List gating) exist for all browsers:

* [Chrome](https://chromewebstore.google.com/detail/cross-origin-storage/denpnpcgjgikjpoglpjefakmdcbmlgih)
* [Firefox](https://addons.mozilla.org/en-US/firefox/addon/cross-origin-storage)
* [Safari](https://apps.apple.com/app/cross-origin-storage/id6788319695)

#### Developer interest

Developer interest is tracked in the [Web / Framework developer views notes](https://chromestatus.com/feature/5163371507875840#:~:text=Web%20/%20Framework%20developer%20views%20notes) section of the ChromeStatus entry.

#### Awesome Cross-Origin Storage

More demos and resources are tracked on the [Awesome Cross-Origin Storage](https://github.com/tomayac/awesome-cross-origin-storage) list.

<!-- Content below this is maintained by @w3c-tag-bot -->
---

Track conversations at https://tag-github-bot.w3.org/gh/w3ctag/design-reviews/1254


-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/1254
You are receiving this because you are subscribed to this thread.

Message ID: <w3ctag/design-reviews/issues/1254@github.com>