Re: [webkit-dev] Same-Site cookies by default

2020-03-06 Thread John Wilander
> On Mar 6, 2020, at 6:59 PM, Patrick Griffis wrote: > > On 2020-03-06 6:51 pm, John Wilander wrote: >> Hi Patrick! >> >> Thanks for bringing this up. I’ll share my view of where we are. >> >> First of all, cookies mostly live in the http layer so the various >> WebKit ports would have to

Re: [webkit-dev] Terminology: Could we change 'roll out' to 'roll back'?

2020-03-06 Thread Alexey Proskuryakov
> 6 марта 2020 г., в 18:29, Ryosuke Niwa написал(а): > > On Fri, Mar 6, 2020 at 6:15 PM Kirsling, Ross wrote: >> >> Late on Friday seems like a good time for a terminological debate (), so I’d >> like to propose we revisit one of the strangest items of WebKit-specific >> terminology: the

Re: [webkit-dev] Same-Site cookies by default

2020-03-06 Thread Patrick Griffis
On 2020-03-06 6:51 pm, John Wilander wrote: > Hi Patrick! > > Thanks for bringing this up. I’ll share my view of where we are. > > First of all, cookies mostly live in the http layer so the various > WebKit ports would have to work this out independently to some extent. > Maybe libcurl and

Re: [webkit-dev] Same-Site cookies by default

2020-03-06 Thread John Wilander
Hi Patrick! Thanks for bringing this up. I’ll share my view of where we are. First of all, cookies mostly live in the http layer so the various WebKit ports would have to work this out independently to some extent. Maybe libcurl and libsoup have readily available APIs for this? Second, we

Re: [webkit-dev] Terminology: Could we change 'roll out' to 'roll back'?

2020-03-06 Thread Konstantin Tokarev
07.03.2020, 05:41, "Kirsling, Ross" : > I'd be thrilled for us to use 'revert'. > Somehow I'd convinced myself that it'd be easier to ask for this if we kept > the 'roll' part, but I'm not really sure why I thought so. On the negative side, it won't be possible anymore to say that someone is

Re: [webkit-dev] Terminology: Could we change 'roll out' to 'roll back'?

2020-03-06 Thread Maciej Stachowiak
I agree this usage of “roll out” is potentially confusing. I think people say “roll out” for the symmetry to “check in”. It also creates the convenient term “roll back in” for when a rollout is undone. Personally, I think we should say “revert” and avoid use of roll-phrases entirely.

Re: [webkit-dev] Same-Site cookies by default

2020-03-06 Thread Maciej Stachowiak
Current WebKit trunk blocks all third party cookies (with ITP enabled), which is a more extreme version of the same thing. We’re currently testing the compatibility fallout. Treating cookies as SameSite=Lax by default is moot when third-party cookies are blocked, as the SameSite=None behavior

Re: [webkit-dev] Terminology: Could we change 'roll out' to 'roll back'?

2020-03-06 Thread Kirsling, Ross
I'd be thrilled for us to use 'revert'. Somehow I'd convinced myself that it'd be easier to ask for this if we kept the 'roll' part, but I'm not really sure why I thought so. Of course, it's fine for folks to continue to _say_ 'roll out' due to habit; I just think it would be great if our

Re: [webkit-dev] Terminology: Could we change 'roll out' to 'roll back'?

2020-03-06 Thread Ryosuke Niwa
On Fri, Mar 6, 2020 at 6:15 PM Kirsling, Ross wrote: > > Late on Friday seems like a good time for a terminological debate (), so I’d > like to propose we revisit one of the strangest items of WebKit-specific > terminology: the phrase ‘roll out’. > > In our industry, the typical meaning of the

[webkit-dev] Terminology: Could we change 'roll out' to 'roll back'?

2020-03-06 Thread Kirsling, Ross
Greetings WebKittens, Late on Friday seems like a good time for a terminological debate (), so I’d like to propose we revisit one of the strangest items of WebKit-specific terminology: the phrase ‘roll out’. In our industry, the typical meaning of the phrase ‘roll out’ is, of course,

[webkit-dev] Same-Site cookies by default

2020-03-06 Thread Patrick Griffis
Chromium has had the idea to treat all cookies as SameSite=Lax by default as well as blocking SameSite=None over HTTP for a while now, hidden behind a flag, and seem to be rolling this out soon. The topic is discussed in detail here:

[webkit-dev] WebXR on WebKit

2020-03-06 Thread Sergio Villar Senin
Hi, I've just uploaded a patch[1] (based on previous work from my colleague Žan Doberšek) which brings a very basic WebXR[2] support for WebKit. Right now is just IDLs, stubs and pretty basic platform code, mostly empty implementations anyway. You can see WebXR[3] as the evolution of the