Cookies Having Independent Partitioned State (CHIPS)

[privacycg]

Cookies Having Independent Partitioned State (CHIPS)

[bvandersloot-mozilla]

As Johann captured, and to provide a little more context, given our move toward standardizing on blocking third-party cookies by default, Mozilla is supportive of CHIPS, pending details.

[johannhof]

Recapping key points from our discussion at yesterday's PrivacyCG call:

• Reps from Chrome, Firefox, Safari and Edge were all generally supportive of CHIPS, of course with some details still to be figured out.
• Firefox, Safari and Edge are also interested in exploring partitioning based on requestStorageAccess, however that is not blocking progress on CHIPS.
• Some of the more detailed concerns that were discussed:
  • How should partitioning the top-level work? (privacycg/CHIPS#38)
  • First-Party Sets should not be integrated tightly into CHIPS, to allow adoption for browsers that don't support FPS or when FPS is disabled. (This might be solved by specifying integration with CHIPS in FPS instead of vice-versa).
• In Slack there was also a conversation around the right venue for standardization. Given the positive signals from PrivacyCG I'm inclined to think that it might be a good place for incubation, but generally the primary venue for standardization is the HTTP WG, pending some decision on httpwg/http-extensions#2084

Another detail that wasn't discussed because we were out of time was giving servers more context on requests, which is now part 6 of privacycg/meetings#19

Overall I think we made great progress!

[johannhof]

It's probably fine to close this issue, given that we've had https://github.com/privacycg/CHIPS for a long time now :)