Hacker News new | past | comments | ask | show | jobs | submit login

Site isolation and origin isolation are separate concerns. In the "origin isolation" model, you need to ensure different origins are in different processes, and that their data don't leak from one to the other. In site isolation, you only care about tabs not being able to communicate with each-other.

Also, you seem to be missing something: Chrome is going to implement the same set of headers, with the same set of restrictions when they are applied. This isn't an arbitrary firefox decision, every web browser is expected to follow suit. See the various mentions of "chrome" in https://web.dev/coop-coep/




> In site isolation, you only care about tabs not being able to communicate with each-other.

That is not true.

https://www.chromium.org/Home/chromium-security/site-isolati...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: