Storage Exists API

[privacycg]

Storage Exists API

[othermaciej]

The abuse you mention is exactly why we won't do it. It would enable the same types of privacy leaks as described in this paper.

[hober]

Given the potential for abuse, I'm going to go ahead and close this issue. Please let me know if we should re-open it.

[laughinghan]

@dickhardt Have you seen #8 and the WebKit strawman proposal, IsLoggedIn? I think it's what you're asking for, except the 3P site itself has to do the check in its iframe, and the user has to explicitly click yes on a permission prompt during the prior visit to what you're calling "the 3P site" (it was first-party during that visit, of course). This helps mitigate the potential for abuse: 3Ps that set cookies for their own purposes can't be unknowingly used as fingerprinting bits by 1P (because the 3P iframe has to choose to communicate with 1P), and a tracker would find it difficult to convince a user to visit-and-click-yes-to-the-permission-prompt on enough cooperating 3P sites to collect useful amounts of fingerprinting bits.