Good idea, I updated both standards positions issues. On Wednesday, July 24, 2024 at 9:38:09 AM UTC-7 Daniel Bratell wrote:
> The standard-positions issues with Mozilla and WebKit seem to have been > forgotten since they were filed more than a year ago. I think it would be a > good idea to ping the issues and let them know that this is currently going > through the shipping process. > > /Daniel > On 2024-07-16 22:20, Robbie McElrath wrote: > > Thanks - before I jump too deeply into the review, would you mind > requesting the various review gate bits in your chromestatus entry? > > Done. We've been using launch/ for the approvals so far. I added a link to > the corresponding launch/ approval in chromestatus when applicable. > > No, the IWA security rules are enforced with existing web primitives > (CSP/TT, permissions policy, COI) that already have DevTools support. There > is some non-DevTools tooling needed to build and sign the bundle, but I > don't think there's a use case for adding bundle-related functionality into > DevTools. > > Makes sense. Are there plans to build said tooling and make it available > to ease adoption? > > > Yeah, we already have JS tooling available to create bundles > <https://github.com/WICG/webpackage/tree/main/js/bundle>, sign bundles > <https://github.com/WICG/webpackage/tree/main/js/sign> (the new integrity > block format is already supported), and a webpack > <https://github.com/GoogleChromeLabs/webbundle-plugins/blob/main/packages/webbundle-webpack-plugin/README.md> > > and rollup > <https://github.com/GoogleChromeLabs/webbundle-plugins/tree/main/packages/rollup-plugin-webbundle> > > plugin. These make it easy to integrate with existing npm-based flows, see > the telnet demo app > <https://github.com/GoogleChromeLabs/telnet-client/blob/main/webpack.wbn.js#L36> > > for an example. There's also a go tool > <https://github.com/WICG/webpackage/tree/main/go/bundle> that can build > and sign bundles, but it doesn't support integrity block v2 yet. Updating > the go version has been lower priority as we don't know of anyone that > actually used it. > > > Integrity block v2 was recently proposed to address key rotation related > issues with v1. The internal design doc is here: go/iwa-key-rotation. Yes, > we will be speccing this. > > Great - any idea of when you might have some version of a spec draft ready? > > > The engineer working on this estimates it being done in the next few weeks. > > > > > > > Link to entry on the Chrome Platform Status > > https://chromestatus.com/feature/5146307550248960 > > Links to previous Intent discussions > > Intent to prototype: https://groups.google.com/a/ch > romium.org/d/msgid/blink-dev/CAEmk%3DMayyUjocrvyQKgu-bZy_ > 4z5VJ0ijHCAijBTZY2xLwJpJQ%40mail.gmail.com > > This intent message was generated by Chrome Platform Status > <https://chromestatus.com/>. > > -- > You received this message because you are subscribed to the Google Groups > "blink-dev" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to blink-dev+unsubscr...@chromium.org. > To view this discussion on the web visit https://groups.google.com/a/ch > romium.org/d/msgid/blink-dev/CANtkjcS1A2rO%2BvHnnPXqc6sxhjenearhCGx9vxt% > 2BcKqM5otDfA%40mail.gmail.com > <https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CANtkjcS1A2rO%2BvHnnPXqc6sxhjenearhCGx9vxt%2BcKqM5otDfA%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > > -- > You received this message because you are subscribed to the Google Groups > "blink-dev" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to blink-dev+unsubscr...@chromium.org. > > To view this discussion on the web visit > https://groups.google.com/a/chromium.org/d/msgid/blink-dev/00d31784-ba95-4e02-99a7-1893e7aa7e06n%40chromium.org > > <https://groups.google.com/a/chromium.org/d/msgid/blink-dev/00d31784-ba95-4e02-99a7-1893e7aa7e06n%40chromium.org?utm_medium=email&utm_source=footer> > . > > -- You received this message because you are subscribed to the Google Groups "blink-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+unsubscr...@chromium.org. To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/3326f678-b859-4ff2-ba5d-be4fc90c4e82n%40chromium.org.
