Re: [dev] surf vertical and horizontal same-origin policy patch (updated, with profiling mitigation)

2015-01-28 Thread Ben Woolley
re transparent approach. > > Thanks again for the feedback, > ‎ > Ben > Original Message > From: Christoph Lohmann > Sent: Friday, January 23, 2015 11:57 PM > To: dev mail list > Reply To: dev mail list > Subject: Re: [dev] surf vertical and horizontal same-origin policy pa

Re: [dev] surf vertical and horizontal same-origin policy patch (updated, with profiling mitigation)

2015-01-24 Thread tautolog
ginal Message   From: Christoph Lohmann Sent: Friday, January 23, 2015 11:57 PM To: dev mail list Reply To: dev mail list Subject: Re: [dev] surf vertical and horizontal same-origin policy patch (updated, with profiling mitigation) Greetings. On Sat, 24 Jan 2015 08:49:50 +0100 Ben Woolley wrote: &

Re: [dev] surf vertical and horizontal same-origin policy patch (updated, with profiling mitigation)

2015-01-24 Thread tautolog
Ben   Original Message   From: Christoph Lohmann Sent: Friday, January 23, 2015 11:57 PM To: dev mail list Reply To: dev mail list Subject: Re: [dev] surf vertical and horizontal same-origin policy patch (updated, with profiling mitigation) Greetings. On Sat, 24 Jan 2015 08:49:50 +0100 Ben

Re: [dev] surf vertical and horizontal same-origin policy patch (updated, with profiling mitigation)

2015-01-23 Thread Christoph Lohmann
Greetings. On Sat, 24 Jan 2015 08:49:50 +0100 Ben Woolley wrote: > Hi all, > > I have attached an update. Thanks for your hard work. I appreciate it. > I read some papers on the profiling issue, and most seem to say that > lowering the diversity is the key, effectively lowering the > "bandwidt

Re: [dev] surf vertical and horizontal same-origin policy patch (updated, with profiling mitigation)

2015-01-23 Thread Ben Woolley
Hi all, I have attached an update. 1. It is against the latest master. 2. It includes an originprompt.html and an originprompt-nojs.html that works properly when javascript is disabled. 3. The Web Storage database has been moved into the per-origin folder, even though it is probably already compl

Re: [dev] surf vertical and horizontal same-origin policy patch

2015-01-08 Thread stanio
Hi sounds very interesting. thanks. will review, test and report when I get some spare time…

[dev] surf vertical and horizontal same-origin policy patch

2015-01-07 Thread Ben Woolley
Hi all, This patch is a bit of a beast for surf. It is intended to be applied after the disk cache patch. It breaks some internal interfaces, so it could conflict with other patches. I have been wanting a browser to implement a complete same-origin policy, and have been investigating how to do th