Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use of Related Website Sets for defining 1st and 3rd party context #70

Open
brgoldstein opened this issue Feb 12, 2025 · 0 comments
Open

Comments

@brgoldstein
Copy link
Collaborator

The Chrome team is requesting feedback from the ecosystem:

Chrome's IP Protection proposal includes relying on Related Website Sets (RWS) for the purposes of determining first-party and third-party on a contextual basis. When building the Masked Domain List (MDL), RWS are taken into account, meaning that a site sharing an RWS with the Top Level Domain (TLD) will not be proxied, even if on the MDL.

Sites are encouraged to submit or update their RWS before IP Protection is launched. If a submitter is defining a same-party relationship for non-browser-storage use cases like IP address, utilizing the Service subset is recommended, where possible. This would avoid utilizing one of the limited Associated subset slots and avoid granting that domain higher storage access privileges than may be necessary (principle of least privilege).

We are interested in feedback on whether there are critical use cases for IP address data sharing among RWS candidate sites (i.e. domains you own) in a 3p context in Incognito where the Service subset may be insufficient, such as embedding many sites you own that are also browsable TLDs, which cannot be Service domains.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant