Skip to content

Commit

Permalink
Add link to subset documentation
Browse files Browse the repository at this point in the history
  • Loading branch information
mreichhoff authored Jul 27, 2022
1 parent f9a1523 commit 28f17e9
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -239,7 +239,7 @@ By exposing a new access-granting API, especially one that relaxes the current `

### Elevated Trust Requirement

To prevent unrelated sites from requesting access, browsers should seek additional trust signals to enable the API to resolve successfully. First-Party Sets is one such mechanism; it could ensure that a relationship exists between the caller and the passed-in site. However, sites designated as part of the "service" subset should not be allowed to gain access on behalf of other sites in the set. Browsers that don’t support First-Party Sets could utilize other mechanisms, like user prompts, allowlists, denylists, or other heuristics.
To prevent unrelated sites from requesting access, browsers should seek additional trust signals to enable the API to resolve successfully. First-Party Sets is one such mechanism; it could ensure that a relationship exists between the caller and the passed-in site. However, sites designated as part of [the "service" subset](https://github.com/krgovind/first-party-sets#defining-a-set-through-use-case-based-subsets) should not be allowed to gain access on behalf of other sites in the set. Browsers that don’t support First-Party Sets could utilize other mechanisms, like user prompts, allowlists, denylists, or other heuristics.


### Cross-Site Protections
Expand Down

0 comments on commit 28f17e9

Please sign in to comment.