diff --git a/index.html b/index.html index 517cae4..054f37a 100644 --- a/index.html +++ b/index.html @@ -266,7 +266,8 @@

The DOMHighResTimeStamp Type

typedef double DOMHighResTimeStamp;

A DOMHighResTimeStamp SHOULD represent a time in milliseconds - accurate to 5 microseconds - see .

+ accurate enough to allow measurement while preventing timing attack + - see for additional considerations.

If the User Agent is unable to provide a time value accurate to 5 microseconds due to hardware or software constraints, the User Agent can represent a DOMHighResTimeStamp as a time in @@ -350,8 +351,11 @@

Clock resolution

this new API an attacker may be able to obtain high-resolution estimates through repeat execution and statistical analysis. To ensure that the new API does not significantly improve the accuracy or speed of such attacks, - the recommended minimum resolution of the Performance interface - should be set to 5 microseconds.

+ the recommended minimum resolution of the DOMHighResTimeStamp type + should be inaccurate enough to prevent attacks.

+
+ Due to recent developments this may need to increase significantly, but the working group has not yet reached consensus on what the new recommend minimum value should be. +

Mitigating such timing side-channel attacks entirely is practically not possible: either all operations would have to execute in a time that does not vary based on the value of any confidential information, or, the