Re: [w3ctag/design-reviews] Incubation: Cross-Origin Storage (Issue #1254)

tomayac left a comment (w3ctag/design-reviews#1254)

> A quick status question on this: are you still working on any part of [WICG/cross-origin-storage#73](https://github.com/WICG/cross-origin-storage/pull/73), or has that been fully subsumed by other changes?

Yes, we're still working on this. Please see [`privacy.md`](https://github.com/WICG/cross-origin-storage/blob/phl-research/privacy.md) that lists attacks and mitigations. Note that this file is not on the `main` branch yet. It's still _work in progress_ and thus non-final, but can maybe serve to show the rough direction of our thinking. 

> I see that there was a separate update to https://github.com/WICG/cross-origin-storage#privacy-considerations such that it no longer suggests a dependency on 3P cookies.

Yes, the ultimate objective is to make this API implementable with mitigations (as per the above point) with third-party cookies disabled.



-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/1254#issuecomment-6056452359
You are receiving this because you are subscribed to this thread.

Message ID: <w3ctag/design-reviews/issues/1254/6056452359@github.com>

Received on Thursday, 8 October 2026 09:02:26 UTC