Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Because the behavior is process-scoped rather than origin-scoped

Hmm, I'm a little confused, since in 2021 Mozilla released experimental one-process-per-site:

> This fundamental redesign of Firefox’s Security architecture extends current security mechanisms by creating operating system process-level boundaries for all sites loaded in Firefox for Desktop

https://blog.mozilla.org/security/2021/05/18/introducing-sit...

Perhaps that is not fully released?

Or perhaps it is, but IndexedDB happens to live outside of that isolation?



https://news.ycombinator.com/item?id=47868736 helps me understand that there's a sliver of behaviour that happens to be global, and this thus allows fingerprinting.

If so, cool!




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: