Re: Sub-domain granularity: the poverty of the domain name as the only hook for security
Anne van Kesteren <[email protected]>
| Newsgroups | gmane.org.w3c.tag |
|---|---|
| Message-ID | <CADnb78h_sGrYWERM47zeY55L3BwfKDC4C9Dostk7auS_ik7zzg@mail.gmail.com> |
On Mon, Mar 16, 2015 at 2:28 PM, Tim Berners-Lee <[email protected]> wrote: > Similarly the Same Origin Policy in general is very hampering and in that it > only works at the domain level not at any path level. It would have been > not very much harder to set both of them up to work on subtrees within the > domain, and both would have been much more powerful and useful. I propose > they both be fixed in future. https://www.chromium.org/developers/design-documents/per-page-suborigins might be of interest. It's not exactly an easy problem to solve though. -- https://annevankesteren.nl/