Re: [webkit-dev] Same-Site cookies by default

2020-03-06 Thread John Wilander
> On Mar 6, 2020, at 6:59 PM, Patrick Griffis wrote: > > On 2020-03-06 6:51 pm, John Wilander wrote: >> Hi Patrick! >> >> Thanks for bringing this up. I’ll share my view of where we are. >> >> First of all, cookies mostly live in the http layer so

Re: [webkit-dev] Same-Site cookies by default

2020-03-06 Thread John Wilander
Hi Patrick! Thanks for bringing this up. I’ll share my view of where we are. First of all, cookies mostly live in the http layer so the various WebKit ports would have to work this out independently to some extent. Maybe libcurl and libsoup have readily available APIs for this? Second, we

Re: [webkit-dev] Proposal: add Privacy to WebKit Project Goals

2020-02-25 Thread John Wilander
See inline. > On Feb 23, 2020, at 5:02 PM, Maciej Stachowiak wrote: > > > V2, with stronger privacy language. > > > project-new.html > WebKit is an open source Web content engine for browsers and other > applications. > 1212 > 1313 > 14 We value real-world web compatibility, standards

Re: [webkit-dev] Implementing OffscreenCanvas

2019-10-10 Thread John Wilander
nd discuss it with some people that will know better than me and >> try to get a better picture. >> >> Thanks, >> >> Chris >> >> On 2019-10-10 17:32, John Wilander wrote: >>> Hi Chris! >>> >>> Canvas is a very popular GPU finger

Re: [webkit-dev] Implementing OffscreenCanvas

2019-10-10 Thread John Wilander
Hi Chris! Canvas is a very popular GPU fingerprinting vector and allowing it offscreen sounds like a more convenient way to perform such an attack on user privacy. Do you know if Blink or Gecko have elaborated on this? What is your assessment? Given the cross-engine effort to fight device