> > This particular technique has been discussed before, but there's a > flaw which wasn't mentioned in this email. The idea assumes that all > end users can access the same websites and also that all end users > visit similar websites. Neither of those is a given and as such end > users that for one reason or another only end up visiting one or two > websites that use a "pervasive payload" could be vulnerable to attack.
Thanks for raising this. When you say "can access," are you referring to e.g. national governments or ISPs blocking access to large numbers of otherwise-popular sites? If so, would geography-specific lists of pervasive payloads mitigate this concern? If not, can you provide more details on the scenario you have in mind? On Tue, Apr 26, 2022 at 8:15 AM Anne van Kesteren <[email protected]> wrote: > On Tue, Apr 26, 2022 at 1:59 PM Daisuke Enomoto <[email protected]> > wrote: > > Explainer > > > > > https://docs.google.com/document/d/1pvaMg7J5beBXD7trzHJH_MDULc_wRHLx40MFYAmjknE/edit > > This document isn't public. > > This particular technique has been discussed before, but there's a > flaw which wasn't mentioned in this email. The idea assumes that all > end users can access the same websites and also that all end users > visit similar websites. Neither of those is a given and as such end > users that for one reason or another only end up visiting one or two > websites that use a "pervasive payload" could be vulnerable to attack. > > -- > You received this message because you are subscribed to the Google Groups > "blink-dev" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CADnb78j3GgRgGoyyonu6t2zGCruK_f_RJHXZ7_yhBy8_OEVe-w%40mail.gmail.com > . > -- Vivek | Sekhar | Product Manager | [email protected] -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAEH0Vf1%3DWGM7eyHSfNS4gpH-Fpx%2BaNwEzGFBZ%2Bu0nPyWxQtBXw%40mail.gmail.com.
