Re:Chrome feature: Compression dictionary transport with Sha...
by TonyTrapp on Friday September 22, 2023 @11:08AM
(#37613047)
Maybe no more possibilities than regular cookies, but more stealthy for sure. Cookies are (somewhat) easily reviewable by the user through the web developer UI of most browsers; I doubt there will be any browser UI to managing compression dictionary.
> The existence of a dictionary is effectively a cookie for any requests that match it and should be treated as such:
> * Storage partitioning for dictionary resource metadata should be at least as restrictive as for cookies.
> * Dictionary entries (or at least the metadata) should be cleared any time cookies are cleared.
Given that, I think it offers no more client tracking possibilities than any other existing web tech (cookies, local storage, etc)..