FYI: Pending PRs allowing tightening the default referrer policy

FYI, my colleague Mike West has submitted some PRs to the Fetch
<https://github.com/whatwg/fetch/pull/952> and Referrer Policy
<https://github.com/w3c/webappsec-referrer-policy/pull/125> specs to give
browsers more latitude to set their own, more secure, default referrer
policies.

This is concurrent with our pending change to move Chrome's default
referrer policy to strict-origin-to-cross-origin (please find the I2I on
blink-dev) and follows some other recent prior discussion
<https://github.com/w3c/webappsec-referrer-policy/issues/121> about
changing the specs' treatment of referrer policy defaults.

Cheers,

David Van Cleve
Google