Skip to content

Commit

Permalink
Add more state and standards activity
Browse files Browse the repository at this point in the history
Closes #4.
  • Loading branch information
annevk committed May 6, 2020
1 parent 08acd13 commit ff4ba96
Showing 1 changed file with 19 additions and 6 deletions.
25 changes: 19 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -34,19 +34,23 @@ Aside from using additional keying, outright blocking of the user agent state is

## User agent state

An enumeration of user agent state and ongoing standards activity.
A likely inexhaustive enumeration of user agent state and ongoing standards activity:

* Cookies
* Network state:
* HTTP cache ([whatwg/fetch #943](https://github.com/whatwg/fetch/pull/943))
* Connection pooling
* HTTP cache ([whatwg/fetch #904](https://github.com/whatwg/fetch/issues/904), [whatwg/fetch #943](https://github.com/whatwg/fetch/pull/943))
* Connections ([whatwg/fetch #917](https://github.com/whatwg/fetch/issues/917))
* Also consider speculative connections
* DNS
* HTTP authentication
* Alt-Svc
* Fonts
* HSTS
* TLS client certificates
* TLS session identifiers
* HPKP
* OCSP
* Intermediate CA cache
* Prefetch
* Preconnect
* Storage ([whatwg/storage #18](https://github.com/whatwg/storage/issues/18)):
Expand All @@ -65,12 +69,21 @@ An enumeration of user agent state and ongoing standards activity.
* Web Authentication
* WebRTC’s `deviceId` ([w3c/mediacapture-main #675](https://github.com/w3c/mediacapture-main/issues/675))
* Blob URL store ([w3c/FileAPI #153](https://github.com/w3c/FileAPI/issues/153))
* HTML Standard’s list of available images
* `window.name`
* Browsing context group's agent cluster map (only observable with popups)
* Permissions ([Feature Policy](https://w3c.github.io/webappsec-feature-policy/) allows these to be disabled by default when the top-level site is not equal to the current site and require explicit delegation in such cases)
* Credentials (username and password storage; not a standardized feature)
* Per-site user preferences
* Persistent storage ([whatwg/storage #87](https://github.com/whatwg/storage/issues/87))
* Non-standardized features:
* Credentials (username and password storage)
* Form autofill data storage
* Per-site user preferences
* Favicon cache
* Page info media previews
* Save Page As

If there is state or standards activity missing please [file an issue](https://github.com/privacycg/storage-partitioning/issues/new) or provide a pull request.

## Acknowledgments

The author of this document was inspired by Chromium’s Network Isolation Key, Firefox’s (dynamic) First-Party Isolation & `StoragePrincipal`, Safari’s Intelligent Tracking Prevention, XS-Leaks, and the many people wanting to improve these aspects of the web.
The author of this document was inspired by Chromium’s Network Isolation Key, Firefox’s (dynamic) First-Party Isolation, Safari’s Intelligent Tracking Prevention, XS-Leaks, and the many people wanting to improve these aspects of the web.

0 comments on commit ff4ba96

Please sign in to comment.