On Thu, Jun 29, 2017 at 11:08 AM, Anne van Kesteren <ann...@annevk.nl> wrote:
> Persistent storage gets the global quota. We also expose the local > quota (that of the origin). That means that by filling up space you > can determine how much space all other origins take up together. > > Persistent storage for an origin is user opt-in through a dialog (and > maybe "add to homescreen/new tab" at some point in the future). > > Presumably we already have this leak with a proprietary extension to > IndexedDB that enables persistent storage (though slightly different > in nature; it's not bound by the global quota but by disk space). > > This data could be used for fingerprinting. > > Is this acceptable or should we seek to actively avoid it somehow? > E.g., by limiting persistent storage to an amount less than the global > quota. > > If this is the problem that was described in https://github.com/whatwg/storage/issues/31 Yes, we are trying to solve this problem right now. There is a bug, Bug 1290481 <https://bugzilla.mozilla.org/show_bug.cgi?id=1290481>, has been opened for tackling this issue. > -- > https://annevankesteren.nl/ > _______________________________________________ > dev-platform mailing list > dev-platform@lists.mozilla.org > https://lists.mozilla.org/listinfo/dev-platform > -- Tim Huang Mozilla Taiwan email:tihu...@mozilla.com phone:+886-2-8786-1100#402 _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform