Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a Security and Privacy section. #72

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Add a Security and Privacy section. #72

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 16 additions & 1 deletion storage.bs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -348,7 +348,22 @@ must run these steps:
<li><p>Return <var>promise</var>.
</ol>


<h2>Security and Privacy Considerations</h2>

<h3>Exposing new data</h3>
Global quota usage is a function of all calls made by an origin to the respective
storage APIs. The number summarizes information that the origin already has
An origin can monitor the change in total quota with every
storage API call to keep a running total.

<h3>User identification and tracking</h3>
An origin that has data stored on the client (non-zero quota usage) can store a
unique identifier for the user. Instead of using this new API, the origin can
simply read a user ID from IndexedDB, or from Cache Storage etc. In other words,
the new API does not make it any easier to identify or track users.

<h3>Padding Opaque Responses</h3>
TODO: Recommend padding for opaque responses.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is quite important to add if we're going to say anything at all, in particular as it contradicts some of the information stated above.


<h2 class=no-num id="acks">Acknowledgments</h2>

Expand Down