LGTM2 On Wed, Oct 11, 2023 at 7:32 AM Yoav Weiss <[email protected]> wrote:
> LGTM1 > > On Friday, October 6, 2023 at 4:41:48 PM UTC+2 Mike Taylor wrote: > >> Thanks Jason! >> >> And yes, Cammie (and team), please request approval bits in Chromestatus >> - API OWNERs will wait on that (not approvals, just beginning the process >> for each) before approving. >> >> thanks, >> Mike >> On 10/4/23 9:08 PM, 'Jason Robbins' via blink-dev wrote: >> >> At this morning's API Owners meeting, they asked me to add all review >> gate types to all of the "web developer facing code change" features that >> are currently under review, including this one. So, I have added Privacy, >> Security, Enterprise, Debuggability, and Testing gates to your feature >> entry. >> >> Please click the gate chips in the "Prepare to ship" stage on your >> feature detail page. For each one, answer survey questions and request >> that cross-functional review. You can request them all in parallel. In >> cases where you already have the go/launch >> <https://goto.google.com/launch> bit approved, you can note that in a >> comment on that gate for a potentially faster review. >> >> Thanks, >> jason! >> >> On Wednesday, October 4, 2023 at 9:01:02 AM UTC-7 Chris Harrelson wrote: >> >>> This looks good, but please file for all of the 5 other chips necessary >>> for shipping a feature. >>> >>> On Wed, Sep 27, 2023 at 11:13 AM Cammie Smith Barnes < >>> [email protected]> wrote: >>> >>>> Contact emails >>>> >>>> [email protected] >>>> >>>> [email protected] >>>> >>>> [email protected] >>>> >>>> [email protected] >>>> >>>> Explainer >>>> >>>> https://github.com/WICG/shared-storage >>>> >>>> Specification >>>> >>>> https://wicg.github.io/shared-storage/ >>>> >>>> Summary >>>> >>>> We plan to ship the following changes to the Shared Storage API: >>>> >>>> 1. >>>> >>>> Only allow Private Aggregation reports for up to 5 seconds after a >>>> worklet operation starts >>>> 1. >>>> >>>> This is a privacy measure to prevent timing attacks. >>>> 2. >>>> >>>> Reports sent after this point are silently dropped >>>> 2. >>>> >>>> Allow writing to and deleting from Shared Storage via HTTP response >>>> header >>>> 1. >>>> >>>> This is a performance improvement and is backwards compatible >>>> 3. >>>> >>>> Per-site privacy budgeting >>>> 1. >>>> >>>> This change enforces budgets to per-site rather than per-origin >>>> >>>> >>>> Blink component >>>> >>>> Blink>Storage>SharedStorage >>>> <https://bugs.chromium.org/p/chromium/issues/list?q=component%3ABlink%3EStorage%3ESharedStorage&can=2> >>>> >>>> >>>> >>>> >>>> Risks >>>> >>>> >>>> Interoperability and Compatibility >>>> >>>> Change [1] will drop the private aggregation contributions issued after >>>> 5 seconds after a worklet operation starts. 5 seconds should be sufficient >>>> for all known use cases, so this change should have negligible backward >>>> compatibility issues. >>>> >>>> Change [2] is optional and fully backwards compatible. >>>> >>>> Change [3] could decrease budget for those that are using multiple >>>> origins today that are considered part of the same eTLD+1. Since the API is >>>> new (shipped in M115), the expectation is for the impact to be low. It will >>>> not break script since the APIs gracefully handle situations where the >>>> budget is exceeded, but could impact the overall quality of the returned >>>> data for that site. >>>> >>>> Gecko: No signal >>>> >>>> WebKit: No signal >>>> >>>> Web developers: No signals >>>> >>>> Other signals: >>>> >>>> WebView application risks >>>> >>>> Does this intent deprecate or change behavior of existing APIs, such >>>> that it has potentially high risk for Android WebView-based applications? >>>> >>>> None >>>> >>>> >>>> Debuggability >>>> >>>> Shared Storage database contents for an origin can be viewed and >>>> modified within devtools. Support for debugging Shared Storage worklets >>>> will be available within the next couple of milestones. >>>> >>>> >>>> Will this feature be supported on all six Blink platforms (Windows, >>>> Mac, Linux, Chrome OS, Android, and Android WebView)? >>>> >>>> All but WebView >>>> >>>> Is this feature fully tested by web-platform-tests >>>> <https://chromium.googlesource.com/chromium/src/+/main/docs/testing/web_platform_tests.md> >>>> ? >>>> >>>> Yes >>>> >>>> Flag name >>>> >>>> Finch feature name >>>> >>>> SharedStorageAPIM118 >>>> >>>> Requires code in //chrome? >>>> >>>> No >>>> >>>> Estimated milestones >>>> >>>> We intend to ship in M119. >>>> >>>> Anticipated spec changes >>>> >>>> 1. >>>> >>>> Timeout enforcement: >>>> >>>> https://github.com/patcg-individual-drafts/private-aggregation-api/pull/102 >>>> 2. >>>> >>>> Allow writing to Shared Storage via response headers >>>> >>>> https://github.com/WICG/shared-storage/pull/110 >>>> >>>> 1. >>>> >>>> Per-site privacy budgeting >>>> >>>> https://github.com/WICG/shared-storage/pull/118 >>>> >>>> Link to entry on the Chrome Platform Status >>>> >>>> https://chromestatus.com/feature/5112254843846656 >>>> >>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "blink-dev" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAJ8xcq5HooQ3L6HbL9z8-xP9fFw3gjW6150H8RSJ_a4pfDmMcQ%40mail.gmail.com >>>> <https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAJ8xcq5HooQ3L6HbL9z8-xP9fFw3gjW6150H8RSJ_a4pfDmMcQ%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>> . >>>> >>> -- >> You received this message because you are subscribed to the Google Groups >> "blink-dev" group. >> >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/a/chromium.org/d/msgid/blink-dev/02d283d3-3ba1-4baf-aa22-d7b1cd1dd313n%40chromium.org >> <https://groups.google.com/a/chromium.org/d/msgid/blink-dev/02d283d3-3ba1-4baf-aa22-d7b1cd1dd313n%40chromium.org?utm_medium=email&utm_source=footer> >> . >> >> -- > You received this message because you are subscribed to the Google Groups > "blink-dev" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/chromium.org/d/msgid/blink-dev/18947cf0-a260-4a9f-8d12-2e18af7272b1n%40chromium.org > <https://groups.google.com/a/chromium.org/d/msgid/blink-dev/18947cf0-a260-4a9f-8d12-2e18af7272b1n%40chromium.org?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAOMQ%2Bw8uFPssQor0sxzEqoudQ8qE_FaLNP5X7GmOY8s6D3c2%2BA%40mail.gmail.com.
